CVE-2014-125010 - FFmpeg h64.c decode_slice_header memory corruption

Back Back to CVE browser

MEDIUM

FFmpeg h64.c decode_slice_header memory corruption

Published Jun 18, 2022

5.5

MEDIUM

CVSS 3.1

EPSS 0.62%

Description

A vulnerability was found in FFmpeg 2.0. It has been rated as critical. Affected by this issue is the function decode_slice_header of the file libavcodec/h64.c. The manipulation leads to memory corruption. The attack may be launched remotely. It is recommended to apply a patch to fix this issue.

Affected products

Vendor n/a Product FFmpeg Default
n/a
- Version
  2.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

FFmpeg

n/a

Version	Status	Constraints
2.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-119

Buffer Overflow

CWE-787

Out-of-bounds Write

References (2)

http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=91253839e14cce9793ee93f184cef609ca8195d5
x_refsource_MISC
https://vuldb.com/?id.12392
x_refsource_MISCThird Party AdvisoryVDB Entry

Link	Providers	Tags
http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=91253839e14cce9793ee93f184cef609ca8195d5		x_refsource_MISC
https://vuldb.com/?id.12392		x_refsource_MISCThird Party AdvisoryVDB Entry