CVE-2015-1872 in FFmpeg

摘要 (英语)

The ff_mjpeg_decode_sof function in libavcodec/mjpegdec.c in FFmpeg before 2.5.4 does not validate the number of components in a JPEG-LS Start Of Frame segment, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Motion JPEG data.

预定

2015-02-17

披露

2015-07-26

条目

VulDB provides additional information and datapoints for this CVE:

标识符	漏洞	CWE	可利用	对策	CVE
76807	FFmpeg JPEG-LS Start of Frame Segment mjpegdec.c ff_mjpeg_decode_sof 内存损坏	119	未定义	官方修复	CVE-2015-1872