FFmpeg rpza_decode_stream memory corruption
CVE-2014-125017

7.3HIGH

Key Information:

Vendor: Unspecified
Status: Ffmpeg
Vendor: CVE Published:; 18 June 2022

🔔 Create Unspecified Vulnerability Alert

What is CVE-2014-125017?

A vulnerability classified as critical was found in FFmpeg 2.0. This vulnerability affects the function rpza_decode_stream. The manipulation leads to memory corruption. The attack can be initiated remotely. The name of the patch is Fixes Invalid Writes. It is recommended to apply a patch to fix this issue.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

FFmpeg 2.0

References

http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=77bb...

x_refsource_MISC

https://vuldb.com/?id.12340

x_refsource_MISC

CVSS V3.1

Score:

7.3

Severity:

HIGH

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
Jun 18, 2022
Vulnerability Reserved
Jun 17, 2022

Credit

Mateusz Jurczyk/Gynvael Coldwind

JSON

Unspecified