Lucene search

K
cve[email protected]CVE-2015-8216
HistoryNov 17, 2015 - 1:59 a.m.

CVE-2015-8216

2015-11-1701:59:00
CWE-17
web.nvd.nist.gov
41
cve-2015-8216
ljpeg_decode_yuv_scan
libavcodec
mjpegdec.c
ffmpeg
denial of service
out-of-bounds array access
nvd

9.3 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

69.1%

The ljpeg_decode_yuv_scan function in libavcodec/mjpegdec.c in FFmpeg before 2.8.2 omits certain width and height checks, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted MJPEG data.

CPENameOperatorVersion
ffmpeg:ffmpegffmpegle2.8.1

9.3 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

69.1%