CVE-2014-125005: FFmpeg mpeg4videodec.c decode_vol_header memory corruption

Published Jun 18, 2022

Updated

A vulnerability, which was classified as problematic, was found in FFmpeg 2.0. This affects the function decodevolheader of the file libavcodec/mpeg4videodec.c. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix this issue.

Affected Software

1 affected component

FFmpeg FFmpeg=2.0

Remediation

Patch Available

http://git.videolan.org/?p=ffmpeg.git;a=commit;h=3edc3b159503d512c919b3d5902f7026e961823a

Event History

Jun 18, 2022

CVE Published

via MITRE·06:15 AM

Data Sourced

via MITRE·06:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2014-125005?

The severity of CVE-2014-125005 is medium with a severity value of 5.5.

How does CVE-2014-125005 affect FFmpeg 2.0?

CVE-2014-125005 affects the function decode_vol_header of the file libavcodec/mpeg4videodec.c in FFmpeg 2.0.

What is the recommended action to fix CVE-2014-125005?

It is recommended to apply a patch to fix CVE-2014-125005.

Can CVE-2014-125005 be exploited remotely?

Yes, CVE-2014-125005 can be exploited remotely.

What are the references for CVE-2014-125005?

The references for CVE-2014-125005 are: [http://git.videolan.org/?p=ffmpeg.git;a=commit;h=3edc3b159503d512c919b3d5902f7026e961823a](http://git.videolan.org/?p=ffmpeg.git;a=commit;h=3edc3b159503d512c919b3d5902f7026e961823a) and [https://vuldb.com/?id.12585](https://vuldb.com/?id.12585).