Improper input validation in Ffmpeg

CVE-2013-0854

The mjpeg_decode_scan_progressive_ac function in libavcodec/mjpegdec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted MJPEG data.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.031 (86.5th percentile) — read the EPSS interpretation.

Affected products

  • Ffmpeg — versions 0.3, 0.3.1, 0.3.2
  • N/a — versions n/a

Weakness classification (CWE)

References