CVE-2015-1872 in FFmpeg
Résumé (Anglaise)
The ff_mjpeg_decode_sof function in libavcodec/mjpegdec.c in FFmpeg before 2.5.4 does not validate the number of components in a JPEG-LS Start Of Frame segment, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Motion JPEG data.
Réserver
17/02/2015
Divulgation
26/07/2015
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 76807 | FFmpeg JPEG-LS Start of Frame Segment mjpegdec.c ff_mjpeg_decode_sof buffer overflow | 119 | Non défini | Correctif officiel | CVE-2015-1872 |