CVE-2014-125007: FFmpeg hevcpred_template.c intra_pred memory corruption

Published Jun 18, 2022

Updated

A vulnerability classified as problematic was found in FFmpeg 2.0. Affected by this vulnerability is the function intrapred of the file libavcodec/hevcpredtemplate.c. The manipulation leads to memory corruption. The attack can be launched remotely. It is recommended to apply a patch to fix this issue.

Affected Software

1 affected component

FFmpeg FFmpeg=2.0

Remediation

Patch Available

http://git.videolan.org/?p=ffmpeg.git;a=commit;h=dfefc9097e9b4bb20442e65454a40043bd189b3d

Event History

Jun 18, 2022

CVE Published

via MITRE·06:15 AM

Data Sourced

via MITRE·06:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2014-125007?

The severity of CVE-2014-125007 is medium with a severity value of 5.5.

How does CVE-2014-125007 affect FFmpeg?

CVE-2014-125007 affects the function intra_pred of the file libavcodec/hevcpred_template.c in FFmpeg 2.0.

What is the impact of CVE-2014-125007?

CVE-2014-125007 can lead to memory corruption and can be exploited remotely.

What is the recommended action to fix CVE-2014-125007?

It is recommended to apply a patch provided by FFmpeg to fix CVE-2014-125007.

Where can I find more information about CVE-2014-125007?

You can find more information about CVE-2014-125007 in the following references: [1](http://git.videolan.org/?p=ffmpeg.git;a=commit;h=dfefc9097e9b4bb20442e65454a40043bd189b3d), [2](https://vuldb.com/?id.12583).