CVE-2014-125013: FFmpeg msrle.c msrle_decode_frame memory corruption

Published Jun 18, 2022

Updated

A vulnerability was found in FFmpeg 2.0 and classified as problematic. This issue affects the function msrledecodeframe of the file libavcodec/msrle.c. The manipulation leads to memory corruption. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue.

Affected Software

1 affected component

FFmpeg FFmpeg=2.0

Remediation

Patch Available

http://git.videolan.org/?p=ffmpeg.git;a=commit;h=c919e1ca2ecfc47d796382973ba0e48b8f6f92a2

Event History

Jun 18, 2022

CVE Published

via MITRE·06:16 AM

Data Sourced

via MITRE·06:16 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2014-125013?

The severity of CVE-2014-125013 is medium.

How does CVE-2014-125013 affect FFmpeg?

CVE-2014-125013 affects the function msrle_decode_frame in the FFmpeg library.

How can CVE-2014-125013 be exploited?

CVE-2014-125013 can be exploited remotely.

What is the recommended action to fix CVE-2014-125013?

It is recommended to apply a patch to fix CVE-2014-125013.

Where can I find more information about CVE-2014-125013?

You can find more information about CVE-2014-125013 at the following references: [Reference 1](http://git.videolan.org/?p=ffmpeg.git;a=commit;h=c919e1ca2ecfc47d796382973ba0e48b8f6f92a2) and [Reference 2](https://vuldb.com/?id.12389).