CVE-2014-125004: FFmpeg vmnc.c decode_hextile memory corruption
Published Jun 18, 2022
·Updated
A vulnerability has been found in FFmpeg 2.0 and classified as problematic. This vulnerability affects the function decodehextile of the file libavcodec/vmnc.c. The manipulation leads to memory corruption. The attack can be initiated remotely. It is recommended to apply a patch to fix this issue.
Affected Software
1 affected component
FFmpeg FFmpeg=2.0
Remediation
Event History
Jun 18, 2022
CVE Published
via MITRE·06:15 AM
Data Sourced
via MITRE·06:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2014-125004.
2
What is the severity of CVE-2014-125004?
The severity of CVE-2014-125004 is medium with a severity value of 5.5.
3
What software is affected by CVE-2014-125004?
FFmpeg 2.0 is affected by CVE-2014-125004.
4
How does the vulnerability in FFmpeg 2.0 manifest?
The vulnerability in FFmpeg 2.0 manifests in the decode_hextile function of the file libavcodec/vmnc.c, leading to memory corruption.
5
Is the attack initiated remotely?
Yes, the attack can be initiated remotely.
6
How can I fix CVE-2014-125004?
It is recommended to apply a patch to fix CVE-2014-125004.