5
CVSSv2

CVE-2014-9319

Published: 09/12/2014 Updated: 07/11/2023
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

The ff_hevc_decode_nal_sps function in libavcodec/hevc_ps.c in FFMpeg prior to 2.1.6, 2.2.x up to and including 2.3.x, and 2.4.x prior to 2.4.4 allows remote malicious users to cause a denial of service (out-of-bounds access) via a crafted .bit file.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

ffmpeg ffmpeg 2.3

ffmpeg ffmpeg 2.3.3

ffmpeg ffmpeg 2.2

ffmpeg ffmpeg 2.4.1

ffmpeg ffmpeg 2.2.4

ffmpeg ffmpeg 2.3.5

ffmpeg ffmpeg 2.4.3

ffmpeg ffmpeg 2.4.2

ffmpeg ffmpeg 2.3.2

ffmpeg ffmpeg

ffmpeg ffmpeg 2.3.4

ffmpeg ffmpeg 2.4

Vendor Advisories

Debian Bug report logs - #773626 libav: multiple security issues Package: src:libav; Maintainer for src:libav is Debian Multimedia Maintainers <pkg-multimedia-maintainers@listsaliothdebianorg>; Reported by: Michael Gilbert <mgilbert@debianorg> Date: Sun, 21 Dec 2014 04:33:01 UTC Severity: serious Tags: fixed-upst ...
Debian Bug report logs - #775593 libav: CVE-2014-{8544,8546,9316,9318,9319} Package: src:libav; Maintainer for src:libav is Debian Multimedia Maintainers <pkg-multimedia-maintainers@listsaliothdebianorg>; Reported by: Michael Gilbert <mgilbert@debianorg> Date: Sun, 21 Dec 2014 04:33:01 UTC Severity: important Tag ...