PT-2022-7777

CVE-2014-125017

·

Published

2022-06-18

·

Updated

2022-06-27

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions FFmpeg version 2.0
Description A critical vulnerability was found in FFmpeg, affecting the rpza decode stream function. This issue leads to memory corruption and can be initiated remotely. The patch, named Fixes Invalid Writes, is intended to resolve this problem.
Recommendations Apply the Fixes Invalid Writes patch to fix this issue. As a temporary workaround, consider disabling the rpza decode stream function until the patch is applied.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾