Vulnerability in Ffmpeg
CVE-2014-9676
The seg_write_packet function in libavformat/segment.c in ffmpeg 2.1.4 and earlier does not free the correct memory location, which allows remote attackers to cause a denial of service ("invalid memory handler") and possibly execute arbitrary code via a crafted video that triggers a use after free.
EPSS: 0.033 (87.3th percentile) — read the EPSS interpretation.
Affected products
- Ffmpeg
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_MLIST, Exploit)
- cve@mitre.org (vendor-advisory, x_refsource_GENTOO)