CVE-2015-8217

The CVE-2015-8217 vulnerability in FFmpeg (libavcodec/hevc_ps.c) arose from not validating the Chroma Format Indicator, allowing a crafted HEVC stream to trigger an out-of-bounds array access and potential DoS. Connected advisories confirm FFmpeg up to version 2.8.2 fixed this issue by adding a c...

CVE-2014-9319

The vulnerability CVE-2014-9319 affects FFmpeg’s libavcodec/hevc_ps.c (ff_hevc_decode_nal_sps). The function can trigger an out-of-bounds access leading to a denial of service when processing crafted .bit files. Affected branches include FFmpeg releases before 2.1.6, 2.2.x through 2.3.x, and 2.4....