CVE-2015-8217 in FFmpeg

摘要 (英语)

The ff_hevc_parse_sps function in libavcodec/hevc_ps.c in FFmpeg before 2.8.2 does not validate the Chroma Format Indicator, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted High Efficiency Video Coding (HEVC) data.

预定

2015-11-16

披露

2015-11-16

条目

VulDB provides additional information and datapoints for this CVE:

标识符	漏洞	CWE	可利用	对策	CVE
79225	FFmpeg Chroma Format Indicator hevc_ps.c ff_hevc_parse_sps 权限提升	20	未定义	官方修复	CVE-2015-8217