CVE-2020-22036

Name	CVE-2020-22036
Description	A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_intra at libavfilter/vf_bwdif.c, which might lead to memory corruption and other potential consequences.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more)
NVD severity	medium

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
ffmpeg (PTS)	stretch	7:3.2.14-1~deb9u1	vulnerable
	stretch (security)	7:3.2.15-0+deb9u2	vulnerable
	buster, buster (security)	7:4.1.6-1~deb10u1	vulnerable
	bullseye, sid	7:4.3.2-0+deb11u2	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
ffmpeg	source	(unstable)	7:4.3-2

Notes

[buster] - ffmpeg <postponed> (Wait for 4.1.7)
https://trac.ffmpeg.org/ticket/8261
https://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=8c3166e1c302c3ba80d9742ae46161c0fa8e2606