Buffer overflow in Ffmpeg

CVE-2014-8547

libavcodec/gifdec.c in FFmpeg before 2.4.2 does not properly compute image heights, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted GIF data.

Vulnerability class: Buffer Overflow

EPSS: 0.031 (86.2th percentile) — read the EPSS interpretation.

Affected products

Ffmpeg — versions 0.3, 0.3.1, 0.3.2
Canonical Ubuntu_linux — versions 12.04
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (x_refsource_UBUNTU, vendor-advisory)
cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (vendor-advisory, x_refsource_GENTOO)