n0o.com - Personal archive of discovered vulns & writeups.

[CVE-2020-19645] ffmpeg, Out-of-Bounds access in process_line()


Reported on : 21 Aug 2018 Shipped on : 13 Feb 2019 Type : Out-of-bounds Write In Function : process_line while(!av_isspace(*p)) p++; *(p++) = 0; If the server response data with no space after it, the p will go beyond the buffer end. Then it will write a zero out-of-bound to some place.
https://patchwork.ffmpeg.org/patch/12061/