PT-2022-7779

CVE-2014-125019

·

Published

2022-06-19

·

Updated

2022-06-27

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions FFmpeg version 2.0
Description A vulnerability was found in the function decode nal unit of the component Slice Segment Handler, leading to memory corruption. The manipulation can be initiated remotely.
Recommendations For FFmpeg version 2.0, it is recommended to apply a patch to fix this issue. As a temporary workaround, consider disabling the decode nal unit function until a patch is available.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-787: Out-of-bounds Write
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Related identifiers
CVE-2014-125019
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com