CVE-2020-20901
Buffer Overflow vulnerability in function filter_frame in libavfilter/vf_fieldorder.c in Ffmpeg 4...
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-22022. Reason: This candidate is a duplicate of CVE-2020-22022. Notes: All CVE users should reference CVE-2020-22022 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
What each source reports
CVE List No score
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-22022. Reason: This candidate is a duplicate of CVE-2020-22022. Notes: All CVE users should reference CVE-2020-22022 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
- Record
CVE-2020-20901- Updated
- 2026-11-02
EUVDEUVD-2020-13681 No score
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-22022. Reason: This candidate is a duplicate of CVE-2020-22022. Notes: All CVE users should reference CVE-2020-22022 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
- Record
EUVD-2020-13681- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w53g-xqvq-mxh2 No score
Buffer Overflow vulnerability in function filter_frame in libavfilter/vf_fieldorder.c in Ffmpeg 4...
Buffer Overflow vulnerability in function filter_frame in libavfilter/vf_fieldorder.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts.
- Record
GHSA-w53g-xqvq-mxh2- Weakness
- CWE-120
- Updated
- 2026-11-02
NVD No score
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-22022. Reason: This candidate is a duplicate of CVE-2020-22022. Notes: All CVE users should reference CVE-2020-22022 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
- Record
CVE-2020-20901- Updated
- 2026-11-02
OSVSUSE-SU-2024:1468-1 No score
Security update for ffmpeg
This update for ffmpeg fixes the following issues:
- CVE-2024-31578: Fixed heap use-after-free via av_hwframe_ctx_init() when vulkan_frames init failed (bsc#1223070)
- CVE-2023-49502: Fixed heap buffer overflow via the ff_bwdif_filter_intra_c function in libavfilter/bwdifdsp.c (bsc#1223235)
Adding references for already fixed issues:
- CVE-2021-38091: Fixed integer overflow in function filter16_sobel in libavfilter/vf_convolution.c (bsc#1190732)
- CVE-2021-38090: Fixed integer overflow in function filter16_roberts in libavfilter/vf_convolution.c (bsc#1190731)
- CVE-2020-20898: Fixed integer overflow vulnerability in function filter16_prewitt in libavfilter/vf_convolution.c (bsc#1190724)
- CVE-2020-20901: Fixed buffer overflow vulnerability in function filter_frame in libavfilter/vf_fieldorder.c (bsc#1190728)
- CVE-2020-20900: Fixed buffer overflow vulnerability in function gaussian_blur in libavfilter/vf_edgedetect.c (bsc#1190727)
- CVE-2020-20894: Fixed buffer Overflow vulnerability in function gaussian_blur in libavfilter/vf_edgedetect.c (bsc#1190721)
- Record
SUSE-SU-2024:1468-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2020-20901 No score
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-22022. Reason: This candidate is a duplicate of CVE-2020-22022. Notes: All CVE users should reference CVE-2020-22022 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
- Record
UBUNTU-CVE-2020-20901- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ffmpegSUSE:Linux Enterprise Module for Desktop Applications 15 SP5 From an advisory covering 9 CVEs |
before 3.4.2-150200.11.41.1 | 3.4.2-150200.11.41.1 |
ffmpegSUSE:Linux Enterprise Module for Package Hub 15 SP5 From an advisory covering 9 CVEs |
before 3.4.2-150200.11.41.1 | 3.4.2-150200.11.41.1 |
ffmpegSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 9 CVEs |
before 3.4.2-150200.11.41.1 | 3.4.2-150200.11.41.1 |
ffmpegSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 9 CVEs |
before 3.4.2-150200.11.41.1 | 3.4.2-150200.11.41.1 |
ffmpegSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 9 CVEs |
before 3.4.2-150200.11.41.1 | 3.4.2-150200.11.41.1 |
ffmpegSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 9 CVEs |
before 3.4.2-150200.11.41.1 | 3.4.2-150200.11.41.1 |
ffmpegSUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 9 CVEs |
before 3.4.2-150200.11.41.1 | 3.4.2-150200.11.41.1 |
ffmpegSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 9 CVEs |
before 3.4.2-150200.11.41.1 | 3.4.2-150200.11.41.1 |
ffmpegSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 9 CVEs |
before 3.4.2-150200.11.41.1 | 3.4.2-150200.11.41.1 |
ffmpegSUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 9 CVEs |
before 3.4.2-150200.11.41.1 | 3.4.2-150200.11.41.1 |
Show 5 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ffmpegSUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 9 CVEs |
before 3.4.2-150200.11.41.1 | 3.4.2-150200.11.41.1 |
ffmpegSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 9 CVEs |
before 3.4.2-150200.11.41.1 | 3.4.2-150200.11.41.1 |
ffmpegSUSE:Linux Enterprise Workstation Extension 15 SP5 From an advisory covering 9 CVEs |
before 3.4.2-150200.11.41.1 | 3.4.2-150200.11.41.1 |
ffmpegSUSE:Enterprise Storage 7.1 From an advisory covering 9 CVEs |
before 3.4.2-150200.11.41.1 | 3.4.2-150200.11.41.1 |
ffmpegopenSUSE:Leap 15.5 From an advisory covering 9 CVEs |
before 3.4.2-150200.11.41.1 | 3.4.2-150200.11.41.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-20901 has been rejected by its source and should not be treated as a live vulnerability, published September 20, 2021.
References
nvd.nist.gov/vuln/detail/CVE-2020-20901
trac.ffmpeg.org/ticket/8264
git.videolan.org?p=ffmpeg.git;a=commit;h=07050d7bdc32d82e53ee5bb727f5882323d00dba
github.com/advisories/GHSA-w53g-xqvq-mxh2
suse.com/support/update/announcement/2024/suse-su-20241468-1
bugzilla.suse.com/1190721
Show 18 moreShow less
ubuntu.com/security/CVE-2020-20901
cve.org/CVERecord?id=CVE-2020-20901