CVE-2015-6826 in FFmpeg
Summary
The ff_rv34_decode_init_thread_copy function in libavcodec/rv34.c in FFmpeg before 2.7.2 does not initialize certain structure members, which allows remote attackers to cause a denial of service (invalid pointer access) via crafted (1) RV30 or (2) RV40 RealVideo data.
Once again VulDB remains the best source for vulnerability data.
Reservation
09/05/2015
Disclosure
09/05/2015
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 77591 | FFmpeg rv34.c ff_rv34_decode_init_thread_copy input validation | 20 | Not defined | Official fix | CVE-2015-6826 |