FFmpeg read_var_block_data memory corruption
CVE-2014-125015

7.3HIGH

Key Information:

Vendor: Unspecified
Status: Ffmpeg
Vendor: CVE Published:; 18 June 2022

🔔 Create Unspecified Vulnerability Alert

What is CVE-2014-125015?

A vulnerability classified as critical has been found in FFmpeg 2.0. Affected is the function read_var_block_data. The manipulation leads to memory corruption. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

FFmpeg 2.0

References

http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=18f9...

x_refsource_MISC

https://vuldb.com/?id.12366

x_refsource_MISC

CVSS V3.1

Score:

7.3

Severity:

HIGH

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
Jun 18, 2022
Vulnerability Reserved
Jun 17, 2022

Credit

Mateusz Jurczyk/Gynvael Coldwind

JSON

Unspecified