Memory Leak Affecting libavutil56_70 package, versions <4.4.5-150600.13.19.1


Severity

Recommended
0.0
high
0
10

Based on SUSE Linux Enterprise Server security rating.

Threat Intelligence

EPSS
0.96% (76th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk Learn

Learn about Memory Leak vulnerabilities in an interactive lesson.

Start learning
  • Snyk IDSNYK-SLES156-LIBAVUTIL5670-9486278
  • published20 Mar 2025
  • disclosed19 Mar 2025

Introduced: 19 Mar 2025

CVE-2020-22046  (opens in a new tab)
CWE-401  (opens in a new tab)

How to fix?

Upgrade SLES:15.6 libavutil56_70 to version 4.4.5-150600.13.19.1 or higher.

NVD Description

Note: Versions mentioned in the description apply only to the upstream libavutil56_70 package and not the libavutil56_70 package as distributed by SLES. See How to fix? for SLES:15.6 relevant fixed versions and status.

A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the avpriv_float_dsp_allocl function in libavutil/float_dsp.c.

CVSS Base Scores

version 3.1