CVE-2014-125015 FFmpeg read_var_block_data memory corruption

2022-06-1806:16:05

CWE-119

VulDB

www.cve.org

ffmpeg

critical

vulnerability

memory corruption

patch

remote attack

CVSS3

7.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS

0.001

Percentile

24.2%

JSON

A vulnerability classified as critical has been found in FFmpeg 2.0. Affected is the function read_var_block_data. The manipulation leads to memory corruption. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue.

CNA Affected

[
  {
    "product": "FFmpeg",
    "vendor": "unspecified",
    "versions": [
      {
        "status": "affected",
        "version": "2.0"
      }
    ]
  }
]