PT-2022-7779 · FFmpeg · Ffmpeg

Published 2022-06-19 · Updated 2022-06-27 · CVE-2014-125019

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions FFmpeg version 2.0

Description A vulnerability was found in the function decode nal unit of the component Slice Segment Handler, leading to memory corruption. The manipulation can be initiated remotely.

Recommendations For FFmpeg version 2.0, it is recommended to apply a patch to fix this issue. As a temporary workaround, consider disabling the decode nal unit function until a patch is available.

Fix

Memory Corruption

Buffer Overflow

Weakness Enumeration

CWE-787

CWE-119

Related Identifiers

CVE-2014-125019

Affected Products

Ffmpeg

References · 10

• https://ubuntu.com/security/CVE-2014-125019 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-125019 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2014-125019 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2014-125019 · Security Note
• http://git.videolan.org/?p=ffmpeg.git;a=commit;h=b25e84b739 · Note
• https://t.me/cvenotify/31868 · Telegram Post
• http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=b25e84b739 · Note
• https://t.me/cibsecurity/44796 · Telegram Post
• https://t.me/cvenotify/32241 · Telegram Post
• https://vuldb.com/?id.12297 · Note