CVE-2014-125017: FFmpeg rpza_decode_stream memory corruption
Published Jun 18, 2022
·Updated
A vulnerability classified as critical was found in FFmpeg 2.0. This vulnerability affects the function rpzadecodestream. The manipulation leads to memory corruption. The attack can be initiated remotely. The name of the patch is Fixes Invalid Writes. It is recommended to apply a patch to fix this issue.
Affected Software
1 affected component
FFmpeg FFmpeg=2.0
Remediation
Event History
Jun 18, 2022
CVE Published
via MITRE·06:16 AM
Data Sourced
via MITRE·06:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2014-125017?
The severity of CVE-2014-125017 is high.
2
How does CVE-2014-125017 affect FFmpeg?
CVE-2014-125017 affects FFmpeg version 2.0 by causing memory corruption in the rpza_decode_stream function.
3
Can CVE-2014-125017 be exploited remotely?
Yes, CVE-2014-125017 can be initiated remotely.
4
Where can I find the patch for CVE-2014-125017?
You can find the patch for CVE-2014-125017 at http://git.videolan.org/?p=ffmpeg.git;a=commit;h=77bb0004bbe18f1498cfecdc68db5f10808b6599.
5
What is the Common Weakness Enumeration (CWE) ID for CVE-2014-125017?
The Common Weakness Enumeration (CWE) ID for CVE-2014-125017 is CWE-125 and CWE-119.