Buffer overflow in Ffmpeg

CVE-2014-5272

libavcodec/iff.c in FFMpeg before 1.1.14, 1.2.x before 1.2.8, 2.2.x before 2.2.7, and 2.3.x before 2.3.2 allows remote attackers to have unspecified impact via a crafted iff image, which triggers an out-of-bounds array access, related to the rgb8 and rgbn formats.

Vulnerability class: Buffer Overflow

EPSS: 0.026 (83.8th percentile) — read the EPSS interpretation.

Affected products

Ffmpeg — versions 1.1, 1.1.1, 1.1.2
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (vendor-advisory, x_refsource_GENTOO)
cve@mitre.org (mailing-list, x_refsource_MLIST)
cve@mitre.org (x_refsource_CONFIRM)