PT-2022-7780
CVE-2014-125020
·
Published
2022-06-19
·
Updated
2022-06-27
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
FFmpeg version 2.0
Description
A critical issue has been found in the function
decode update thread context, leading to memory corruption. The attack can be initiated remotely.Recommendations
For FFmpeg version 2.0, apply a patch to fix this issue. As a temporary workaround, consider disabling the
decode update thread context function until a patch is available. Found an issue in the description? Have something to add? Feel free to write us 👾