CVE-2020-13904

FFmpeg 4.2.3 has a use-after-free via a crafted EXTINF duration in an m3u8 file because parse_playlist in libavformat/hls.c frees a pointer, and later that pointer is accessed in av_probe_input_format3 in libavformat/format.c.

packagechannelchannel versionpkg versionstatus
ffmpeg
nixos-unstable
2020-06-24 06:45:18 UTC (22a81a)4.2.3vulnerable
2020-06-23 13:15:26 UTC (4cdd64)4.2.3vulnerable
2020-06-18 22:40:25 UTC (9480ba)4.2.3vulnerable
2020-06-18 18:00:15 UTC (14fcd9)4.2.3vulnerable
2020-06-17 23:05:17 UTC (22c988)4.2.3vulnerable
2020-06-14 21:35:35 UTC (0a1460)4.2.3vulnerable
ffmpeg_4
nixos-19.09
2020-09-28 16:25:37 UTC (75f4ba)4.2.3vulnerable
2020-06-23 10:35:12 UTC (289466)4.2.3vulnerable
2020-06-14 21:00:31 UTC (8260cd)4.2.3vulnerable
2020-06-06 19:05:15 UTC (0a1163)4.2.3vulnerable
2020-06-03 07:30:24 UTC (2f9baf)4.2.3vulnerable
nixos-20.03
2020-09-29 07:40:37 UTC (360e2a)4.2.3vulnerable
2020-09-25 10:05:15 UTC (5659cb)4.2.3vulnerable
2020-09-24 14:00:18 UTC (0bc6da)4.2.3vulnerable
2020-09-23 11:30:13 UTC (6ec10f)4.2.3vulnerable
2020-09-22 16:15:18 UTC (13a15f)4.2.3vulnerable
2020-09-22 01:05:25 UTC (21d8e7)4.2.3vulnerable
2020-09-20 23:25:18 UTC (773ef5)4.2.3vulnerable
2020-09-19 12:10:16 UTC (985047)4.2.3vulnerable
2020-09-18 10:50:25 UTC (faf5bd)4.2.3vulnerable
2020-09-17 20:10:36 UTC (517766)4.2.3vulnerable
2020-09-13 17:25:19 UTC (252bfe)4.2.3vulnerable
2020-09-13 12:25:26 UTC (0da86f)4.2.3vulnerable
2020-09-09 11:00:20 UTC (4bd193)4.2.3vulnerable
2020-09-07 12:05:23 UTC (426740)4.2.3vulnerable
2020-09-05 04:05:38 UTC (51d115)4.2.3vulnerable
2020-09-04 13:50:16 UTC (5607e7)4.2.3vulnerable
2020-09-04 03:25:26 UTC (fa3fb5)4.2.3vulnerable
2020-09-03 14:25:28 UTC (10aede)4.2.3vulnerable
2020-09-03 03:15:14 UTC (0d60b0)4.2.3vulnerable
2020-09-01 05:30:41 UTC (ff6a07)4.2.3vulnerable
2020-09-01 02:30:24 UTC (284777)4.2.3vulnerable
2020-08-30 17:55:35 UTC (925ae0)4.2.3vulnerable
2020-08-30 04:40:38 UTC (1fb95d)4.2.3vulnerable
2020-08-29 19:30:25 UTC (f9c449)4.2.3vulnerable
2020-08-29 03:20:27 UTC (318279)4.2.3vulnerable
2020-08-28 05:05:38 UTC (273929)4.2.3vulnerable
2020-08-27 06:45:11 UTC (feff2f)4.2.3vulnerable
2020-08-24 11:50:18 UTC (14006b)4.2.3vulnerable
2020-08-23 11:20:37 UTC (0c59c1)4.2.3vulnerable
2020-08-22 22:55:37 UTC (b83b54)4.2.3vulnerable
2020-08-22 12:15:16 UTC (ebf599)4.2.3vulnerable
2020-08-22 00:00:40 UTC (64fec3)4.2.3vulnerable
2020-08-20 22:30:12 UTC (de3780)4.2.3vulnerable
2020-08-19 23:55:17 UTC (fc9667)4.2.3vulnerable
2020-08-19 03:50:31 UTC (f0924d)4.2.3vulnerable
2020-08-17 10:25:12 UTC (cb1996)4.2.3vulnerable
2020-08-16 23:05:21 UTC (f8a10a)4.2.3vulnerable
2020-08-15 09:00:31 UTC (3506bc)4.2.3vulnerable
2020-08-14 00:50:39 UTC (05195a)4.2.3vulnerable
2020-08-13 09:45:31 UTC (b4dac6)4.2.3vulnerable
2020-08-12 20:20:43 UTC (2a403c)4.2.3vulnerable
2020-08-12 10:05:18 UTC (209041)4.2.3vulnerable
2020-08-12 03:50:39 UTC (d84d36)4.2.3vulnerable
2020-08-11 07:55:32 UTC (3a78bb)4.2.3vulnerable
2020-08-09 20:10:21 UTC (e9bd19)4.2.3vulnerable
2020-08-09 11:25:43 UTC (d3a1eb)4.2.3vulnerable
2020-08-09 05:20:23 UTC (5ac56e)4.2.3vulnerable
2020-08-07 18:55:17 UTC (4364ff)4.2.3vulnerable
2020-08-07 07:20:29 UTC (825c68)4.2.3vulnerable
2020-08-06 19:00:38 UTC (e23e05)4.2.3vulnerable
2020-08-06 08:05:24 UTC (0c0fe6)4.2.3vulnerable
2020-08-01 07:15:21 UTC (977000)4.2.3vulnerable
2020-07-31 17:50:32 UTC (c9f521)4.2.3vulnerable
2020-07-31 11:05:30 UTC (38516a)4.2.3vulnerable
2020-07-29 02:45:23 UTC (7c85b9)4.2.3vulnerable
2020-07-28 04:50:24 UTC (eeb91b)4.2.3vulnerable
2020-07-27 19:10:21 UTC (274831)4.2.3vulnerable
2020-07-27 03:50:18 UTC (b50d55)4.2.3vulnerable
2020-07-26 08:50:25 UTC (076c67)4.2.3vulnerable
2020-07-25 01:30:26 UTC (0a40a3)4.2.3vulnerable
2020-07-24 09:25:27 UTC (69af91)4.2.3vulnerable
2020-07-23 14:10:39 UTC (1975b8)4.2.3vulnerable
2020-07-22 03:55:35 UTC (9ea61f)4.2.3vulnerable
2020-07-21 18:20:32 UTC (190e79)4.2.3vulnerable
2020-07-18 19:30:34 UTC (bb8f0c)4.2.3vulnerable
2020-07-17 13:50:25 UTC (aaa66d)4.2.3vulnerable
2020-07-16 13:40:33 UTC (76adfc)4.2.3vulnerable
2020-07-16 01:40:17 UTC (dabbc5)4.2.3vulnerable
2020-07-15 15:15:22 UTC (e69cfc)4.2.3vulnerable
2020-07-15 01:30:23 UTC (1a92d0)4.2.3vulnerable
2020-07-13 15:55:27 UTC (add552)4.2.3vulnerable
2020-07-12 13:00:18 UTC (674ab2)4.2.3vulnerable
2020-07-12 01:45:19 UTC (009c50)4.2.3vulnerable
2020-07-11 00:55:40 UTC (68c599)4.2.3vulnerable
2020-07-10 20:00:20 UTC (d28916)4.2.3vulnerable
2020-07-09 05:35:33 UTC (6a00eb)4.2.3vulnerable
2020-07-07 16:55:13 UTC (c9d124)4.2.3vulnerable
2020-07-07 06:45:40 UTC (02203c)4.2.3vulnerable
2020-07-06 20:25:37 UTC (41aa22)4.2.3vulnerable
2020-07-05 17:20:37 UTC (afa9ca)4.2.3vulnerable
2020-07-04 06:35:38 UTC (d6260a)4.2.3vulnerable
2020-07-02 18:55:20 UTC (9a3e34)4.2.3vulnerable
2020-07-01 20:00:19 UTC (f1a79c)4.2.3vulnerable
2020-07-01 04:15:36 UTC (30fb4e)4.2.3vulnerable
2020-06-30 22:35:13 UTC (ff1b66)4.2.3vulnerable
2020-06-26 04:40:28 UTC (f8248a)4.2.3vulnerable
2020-06-25 08:00:25 UTC (646060)4.2.3vulnerable
2020-06-24 00:55:26 UTC (fb6c3a)4.2.3vulnerable
2020-06-23 15:55:32 UTC (9c42eb)4.2.3vulnerable
2020-06-23 06:00:17 UTC (13c15f)4.2.3vulnerable
2020-06-18 21:55:34 UTC (2b4177)4.2.3vulnerable
2020-06-18 17:25:33 UTC (7bb2e7)4.2.3vulnerable
2020-06-17 03:20:29 UTC (a84b79)4.2.3vulnerable
2020-06-17 00:25:28 UTC (927d4e)4.2.3vulnerable
2020-06-14 09:10:26 UTC (db31e4)4.2.3vulnerable
2020-06-13 12:30:34 UTC (8b071b)4.2.3vulnerable
2020-06-12 08:25:30 UTC (894679)4.2.3vulnerable
2020-06-09 06:10:15 UTC (70717a)4.2.3vulnerable
2020-06-08 10:20:32 UTC (e2bb73)4.2.3vulnerable
2020-06-08 06:55:25 UTC (f8463e)4.2.3vulnerable
2020-06-07 06:00:32 UTC (1aa527)4.2.3vulnerable
2020-06-06 22:35:09 UTC (f27709)4.2.3vulnerable
2020-06-04 07:30:28 UTC (05a32d)4.2.3vulnerable
nixos-unstable
2020-06-07 12:15:36 UTC (029a5d)4.2.3vulnerable
2020-06-03 08:40:24 UTC (467ce5)4.2.3vulnerable
2020-05-29 19:15:13 UTC (135073)4.2.3vulnerable
2020-05-28 16:20:35 UTC (46f975)4.2.3vulnerable