CVE Vulnerabilities

CVE-2014-125011

Integer Coercion Error

Published: Jun 18, 2022 | Modified: Nov 21, 2024
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.x
6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

A vulnerability was found in FFmpeg 2.0. It has been declared as problematic. Affected by this vulnerability is the function decode_frame of the file libavcodec/ansi.c. The manipulation leads to integer coercion error. The attack can be launched remotely. It is recommended to apply a patch to fix this issue.

Weakness

Integer coercion refers to a set of flaws pertaining to the type casting, extension, or truncation of primitive data types.

Affected Software

Name Vendor Start Version End Version
Ffmpeg Ffmpeg 2.0 (including) 2.0 (including)
Ffmpeg Ubuntu xenial *

Potential Mitigations

References