PT-2022-7777
CVE-2014-125017
·
Published
2022-06-18
·
Updated
2022-06-27
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
FFmpeg version 2.0
Description
A critical vulnerability was found in FFmpeg, affecting the
rpza decode stream function. This issue leads to memory corruption and can be initiated remotely. The patch, named Fixes Invalid Writes, is intended to resolve this problem.Recommendations
Apply the Fixes Invalid Writes patch to fix this issue. As a temporary workaround, consider disabling the
rpza decode stream function until the patch is applied. Found an issue in the description? Have something to add? Feel free to write us 👾