PT-2022-7774 · FFmpeg · Ffmpeg

Gynvael Coldwind + 1 · Published 2022-06-18 · Updated 2022-06-27 · CVE-2014-125014

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions FFmpeg version 2.0

Description A vulnerability was found in the HEVC Video Decoder component, leading to memory corruption when manipulated. The attack can be launched remotely.

Recommendations For FFmpeg version 2.0, it is recommended to apply a patch to fix this issue.

Fix

Memory Corruption

Buffer Overflow

Weakness Enumeration

CWE-787

CWE-119

Related Identifiers

CVE-2014-125014

Affected Products

Ffmpeg

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2014-125014 · Security Note
• https://cve.org/CVERecord?id=CVE-2014-125014 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-125014 · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-125014 · Vendor Advisory
• http://git.videolan.org/?p=ffmpeg.git;a=commit;h=d1e6602665 · Note
• http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=d1e6602665 · Note
• https://vuldb.com/?id.12367 · Note
• https://t.me/cvenotify/31841 · Telegram Post