8.3
CVSSv3

CVE-2015-8661

Published: 24/12/2015 Updated: 07/11/2023
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 8.3 | Impact Score: 3.7 | Exploitability Score: 3.9
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

The h264_slice_header_init function in libavcodec/h264_slice.c in FFmpeg prior to 2.8.3 does not validate the relationship between the number of threads and the number of slices, which allows remote malicious users to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted H.264 data.

Vulnerable Product Search on Vulmon Subscribe to Product

ffmpeg ffmpeg