CVE-2020-20894
Buffer Overflow vulnerability in function gaussian_blur in libavfilter/vf_edgedetect.c in Ffmpeg...
CVE-2020-20894 has been rejected by its source and should not be treated as a live vulnerability, published September 20, 2021.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-22025. Reason: This candidate is a duplicate of CVE-2020-22025. Notes: All CVE users should reference CVE-2020-22025 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ffmpegSUSE:Linux Enterprise Module for Desktop Applications 15 SP5 From an advisory covering 9 CVEs | before 3.4.2-150200.11.41.1 | 3.4.2-150200.11.41.1 |
ffmpegSUSE:Linux Enterprise Module for Package Hub 15 SP5 From an advisory covering 9 CVEs | before 3.4.2-150200.11.41.1 | 3.4.2-150200.11.41.1 |
ffmpegSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 9 CVEs | before 3.4.2-150200.11.41.1 | 3.4.2-150200.11.41.1 |
ffmpegSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 9 CVEs | before 3.4.2-150200.11.41.1 | 3.4.2-150200.11.41.1 |
ffmpegSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 9 CVEs | before 3.4.2-150200.11.41.1 | 3.4.2-150200.11.41.1 |
ffmpegSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 9 CVEs | before 3.4.2-150200.11.41.1 | 3.4.2-150200.11.41.1 |
ffmpegSUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 9 CVEs | before 3.4.2-150200.11.41.1 | 3.4.2-150200.11.41.1 |
ffmpegSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 9 CVEs | before 3.4.2-150200.11.41.1 | 3.4.2-150200.11.41.1 |
ffmpegSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 9 CVEs | before 3.4.2-150200.11.41.1 | 3.4.2-150200.11.41.1 |
ffmpegSUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 9 CVEs | before 3.4.2-150200.11.41.1 | 3.4.2-150200.11.41.1 |
Show 5 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ffmpegSUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 9 CVEs | before 3.4.2-150200.11.41.1 | 3.4.2-150200.11.41.1 |
ffmpegSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 9 CVEs | before 3.4.2-150200.11.41.1 | 3.4.2-150200.11.41.1 |
ffmpegSUSE:Linux Enterprise Workstation Extension 15 SP5 From an advisory covering 9 CVEs | before 3.4.2-150200.11.41.1 | 3.4.2-150200.11.41.1 |
ffmpegSUSE:Enterprise Storage 7.1 From an advisory covering 9 CVEs | before 3.4.2-150200.11.41.1 | 3.4.2-150200.11.41.1 |
ffmpegopenSUSE:Leap 15.5 From an advisory covering 9 CVEs | before 3.4.2-150200.11.41.1 | 3.4.2-150200.11.41.1 |
What each source reports
CVE ListNo score
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-22025. Reason: This candidate is a duplicate of CVE-2020-22025. Notes: All CVE users should reference CVE-2020-22025 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
- Record
CVE-2020-20894- Updated
- 2026-11-02
EUVDEUVD-2020-13674No score
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-22025. Reason: This candidate is a duplicate of CVE-2020-22025. Notes: All CVE users should reference CVE-2020-22025 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
- Record
EUVD-2020-13674- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qwpr-3q76-f8c4No score
Buffer Overflow vulnerability in function gaussian_blur in libavfilter/vf_edgedetect.c in Ffmpeg...
Buffer Overflow vulnerability in function gaussian_blur in libavfilter/vf_edgedetect.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts.
- Record
GHSA-qwpr-3q76-f8c4- Weakness
- CWE-120
- Updated
- 2026-11-02
NVDNo score
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-22025. Reason: This candidate is a duplicate of CVE-2020-22025. Notes: All CVE users should reference CVE-2020-22025 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
- Record
CVE-2020-20894- Updated
- 2026-11-02
OSVSUSE-SU-2024:1468-1No score
Security update for ffmpeg
This update for ffmpeg fixes the following issues:
- CVE-2024-31578: Fixed heap use-after-free via av_hwframe_ctx_init() when vulkan_frames init failed (bsc#1223070)
- CVE-2023-49502: Fixed heap buffer overflow via the ff_bwdif_filter_intra_c function in libavfilter/bwdifdsp.c (bsc#1223235)
Adding references for already fixed issues:
- CVE-2021-38091: Fixed integer overflow in function filter16_sobel in libavfilter/vf_convolution.c (bsc#1190732)
- CVE-2021-38090: Fixed integer overflow in function filter16_roberts in libavfilter/vf_convolution.c (bsc#1190731)
- CVE-2020-20898: Fixed integer overflow vulnerability in function filter16_prewitt in libavfilter/vf_convolution.c (bsc#1190724)
- CVE-2020-20901: Fixed buffer overflow vulnerability in function filter_frame in libavfilter/vf_fieldorder.c (bsc#1190728)
- CVE-2020-20900: Fixed buffer overflow vulnerability in function gaussian_blur in libavfilter/vf_edgedetect.c (bsc#1190727)
- CVE-2020-20894: Fixed buffer Overflow vulnerability in function gaussian_blur in libavfilter/vf_edgedetect.c (bsc#1190721)
- Record
SUSE-SU-2024:1468-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2020-20894No score
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-22025. Reason: This candidate is a duplicate of CVE-2020-22025. Notes: All CVE users should reference CVE-2020-22025 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
- Record
UBUNTU-CVE-2020-20894- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
nvd.nist.gov/vuln/detail/CVE-2020-20894
git.ffmpeg.org/gitweb/ffmpeg.git/commit/ccf4ab8c9aca0aee66bcc2914031a9c97ac0eeb8
trac.ffmpeg.org/ticket/8260
github.com/advisories/GHSA-qwpr-3q76-f8c4
suse.com/support/update/announcement/2024/suse-su-20241468-1
bugzilla.suse.com/1190721
Show 18 moreShow less
bugzilla.suse.com/1190724
bugzilla.suse.com/1190727
bugzilla.suse.com/1190728
bugzilla.suse.com/1190731
bugzilla.suse.com/1190732
bugzilla.suse.com/1223070
bugzilla.suse.com/1223235
suse.com/security/cve/CVE-2020-20894
suse.com/security/cve/CVE-2020-20898
suse.com/security/cve/CVE-2020-20900
suse.com/security/cve/CVE-2020-20901
suse.com/security/cve/CVE-2021-38090
suse.com/security/cve/CVE-2021-38091
suse.com/security/cve/CVE-2021-38094
suse.com/security/cve/CVE-2023-49502
suse.com/security/cve/CVE-2024-31578
ubuntu.com/security/CVE-2020-20894
cve.org/CVERecord?id=CVE-2020-20894