CVE-2015-6818 in FFmpeg
摘要 (英语)
The decode_ihdr_chunk function in libavcodec/pngdec.c in FFmpeg before 2.7.2 does not enforce uniqueness of the IHDR (aka image header) chunk in a PNG image, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via a crafted image with two or more or these chunks.
预定
2015-09-05
披露
2015-09-05
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 77583 | FFmpeg pngdec.c decode_ihdr_chunk 拒绝服务 | 17 | 未定义 | 官方修复 | CVE-2015-6818 |