A CWE-125: Out-of-bounds read vulnerability exists in long_term_filter function in g729postfilter.c in FFmpeg 4.2.1 during computation of the denominator of pseudo-normalized correlation R'(0), that could result in disclosure of information.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-20902
Reference (s):
- http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=0c61661a2cbe1b8b284c80ada1c2fdddf4992cad
- https://trac.ffmpeg.org/ticket/8176