CVE-2014-125019: FFmpeg Slice Segment decode_nal_unit memory corruption

Published Jun 19, 2022

Updated

A vulnerability, which was classified as problematic, was found in FFmpeg 2.0. This affects the function decodenalunit of the component Slice Segment Handler. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix this issue.

Affected Software

1 affected component

FFmpeg FFmpeg=2.0

Remediation

Patch Available

http://git.videolan.org/?p=ffmpeg.git;a=commit;h=b25e84b739

Event History

Jun 19, 2022

CVE Published

via MITRE·06:10 AM

Data Sourced

via MITRE·06:10 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2014-125019?

The severity of CVE-2014-125019 is medium with a CVSS score of 5.5.

How does CVE-2014-125019 affect FFmpeg?

CVE-2014-125019 affects FFmpeg 2.0 by causing memory corruption in the 'decode_nal_unit' function of the Slice Segment Handler component.

Is CVE-2014-125019 remotely exploitable?

Yes, CVE-2014-125019 can be exploited remotely.

How can I fix CVE-2014-125019?

To fix CVE-2014-125019, it is recommended to apply the available patch.

Where can I find more information about CVE-2014-125019?

More information about CVE-2014-125019 can be found at the following references: [Link 1](http://git.videolan.org/?p=ffmpeg.git;a=commit;h=b25e84b739) and [Link 2](https://vuldb.com/?id.12297).