CVEvulnerability

CVE-2014-5272

6.8 MEDIUM Published 2014-11-03 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-11-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-119

Description

libavcodec/iff.c in FFMpeg before 1.1.14, 1.2.x before 1.2.8, 2.2.x before 2.2.7, and 2.3.x before 2.3.2 allows remote attackers to have unspecified impact via a crafted iff image, which triggers an out-of-bounds array access, related to the rgb8 and rgbn formats.

Affected configurations

• ffmpeg ffmpeg (<= 1.1.13) • ffmpeg ffmpeg 1.1 • ffmpeg ffmpeg 1.1.1 • ffmpeg ffmpeg 1.1.2 • ffmpeg ffmpeg 1.1.3 • ffmpeg ffmpeg 1.1.4 • ffmpeg ffmpeg 1.1.5 • ffmpeg ffmpeg 1.1.6 • ffmpeg ffmpeg 1.1.7 • ffmpeg ffmpeg 1.1.8 • ffmpeg ffmpeg 1.1.9 • ffmpeg ffmpeg 1.1.10 • ffmpeg ffmpeg 1.1.11 • ffmpeg ffmpeg 1.1.12 • ffmpeg ffmpeg 1.2 • ffmpeg ffmpeg 1.2.1 • ffmpeg ffmpeg 1.2.3 • ffmpeg ffmpeg 1.2.4 • ffmpeg ffmpeg 1.2.5 • ffmpeg ffmpeg 1.2.6 • ffmpeg ffmpeg 1.2.7 • ffmpeg ffmpeg 2.0 • ffmpeg ffmpeg 2.0.1 • ffmpeg ffmpeg 2.0.2 • ffmpeg ffmpeg 2.0.3 • ffmpeg ffmpeg 2.0.4 • ffmpeg ffmpeg 2.0.5 • ffmpeg ffmpeg 2.1 • ffmpeg ffmpeg 2.1.1 • ffmpeg ffmpeg 2.1.2 • ffmpeg ffmpeg 2.1.3 • ffmpeg ffmpeg 2.1.4 • ffmpeg ffmpeg 2.1.5 • ffmpeg ffmpeg 2.2 • ffmpeg ffmpeg 2.2.4 • ffmpeg ffmpeg 2.3 • ffmpeg ffmpeg 2.3.2

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References