CVE-2017-14169 in FFmpeg

摘要 (英语)

In the mxf_read_primer_pack function in libavformat/mxfdec.c in FFmpeg 3.3.3, an integer signedness error might occur when a crafted file, which claims a large "item_num" field such as 0xffffffff, is provided. As a result, the variable "item_num" turns negative, bypassing the check for a large value.

预定

2017-09-07

披露

2017-09-07

条目

VulDB provides additional information and datapoints for this CVE:

标识符	漏洞	CWE	可利用	对策	CVE
106185	FFmpeg mxfdec.c mxf_read_primer_pack 权限提升	20	未定义	官方修复	CVE-2017-14169