CVE-2014-125018: FFmpeg decode_slice_header memory corruption

Published Jun 19, 2022

Updated

A vulnerability, which was classified as problematic, has been found in FFmpeg 2.0. Affected by this issue is the function decodesliceheader. The manipulation leads to memory corruption. The attack may be launched remotely. It is recommended to apply a patch to fix this issue.

Affected Software

1 affected component

FFmpeg FFmpeg=2.0

Remediation

Patch Available

http://git.videolan.org/?p=ffmpeg.git;a=commit;h=8a3b85f3a7

Event History

Jun 19, 2022

CVE Published

via MITRE·06:10 AM

Data Sourced

via MITRE·06:10 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2014-125018?

CVE-2014-125018 is a vulnerability found in FFmpeg 2.0 that affects the function decode_slice_header and can lead to memory corruption.

Is CVE-2014-125018 a remote code execution vulnerability?

Yes, CVE-2014-125018 can be exploited remotely.

How severe is CVE-2014-125018?

CVE-2014-125018 has a severity rating of medium.

What is the recommended solution for CVE-2014-125018?

It is recommended to apply a patch to fix CVE-2014-125018.

Where can I find more information about CVE-2014-125018?

You can find more information about CVE-2014-125018 at the following references: [http://git.videolan.org/?p=ffmpeg.git;a=commit;h=8a3b85f3a7](http://git.videolan.org/?p=ffmpeg.git;a=commit;h=8a3b85f3a7) and [https://vuldb.com/?id.12296](https://vuldb.com/?id.12296).