CVE-2020-21697: Debian Linux

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

A heap-use-after-free in the mpeg_mux_write_packet function in libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of service (DOS) via a crafted avi file.

Affected products

• Debian Debian Linux: version 11.0 only
• Ffmpeg Ffmpeg: version 4.2 only

Published 2021-08-10. Last modified 2026-06-17.