CVE-2020-35964: Ffmpeg

Medium severity, CVSS 6.5. EPSS: 1.5% chance of exploitation in the next 30 days.

track_header in libavformat/vividas.c in FFmpeg 4.3.1 has an out-of-bounds write because of incorrect extradata packing.

Affected products

• Ffmpeg Ffmpeg: version 4.3.1 only

Published 2021-01-03. Last modified 2026-06-17.