CVE-2014-8549

CVE-2014-8549 affects FFmpeg (libavcodec/on2avc.c). The vulnerability arises because the code path does not constrain the number of channels to a maximum of 2, enabling remote attackers to trigger out-of-bounds access and cause a Denial of Service (and possibly other impact) via crafted On2 data....