CVE-2020-22035: Debian Linux

High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days.

A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in get_block_row at libavfilter/vf_bm3d.c, which might lead to memory corruption and other potential consequences.

Affected products

• Debian Debian Linux: version 10.0 only
• Ffmpeg Ffmpeg: version 4.2 only

Published 2021-06-01. Last modified 2026-06-17.