PT-2022-7776

CVE-2014-125016

Published

2022-06-18

Updated

2022-06-27

Description by

CVSS 3.1

5.5

Medium

MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions FFmpeg version 2.0

Description A problem has been found that affects the function ff init buffer info of the file utils.c. The manipulation leads to memory corruption. The attack may be initiated remotely.

Recommendations For FFmpeg version 2.0, it is recommended to apply a patch to fix this issue. As a temporary workaround, consider disabling the ff init buffer info function until a patch is available.

Exploitability

Fix

Impacts

Researchers

Gynvael Coldwind

Mateusz Jurczyk

Vendors

Affected products

Weakness enumeration

CWE-787: Out-of-bounds Write

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Related identifiers