CVE-2014-125021: FFmpeg cmv_process_header memory corruption

Published Jun 19, 2022

Updated

A vulnerability was found in FFmpeg 2.0 and classified as problematic. This issue affects the function cmvprocessheader. The manipulation leads to memory corruption. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue.

Affected Software

1 affected component

FFmpeg FFmpeg=2.0

Remediation

Patch Available

http://git.videolan.org/?p=ffmpeg.git;a=commit;h=5430839144

Event History

Jun 19, 2022

CVE Published

via MITRE·06:10 AM

Data Sourced

via MITRE·06:10 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2014-125021?

The severity of CVE-2014-125021 is medium.

How does CVE-2014-125021 affect FFmpeg 2.0?

CVE-2014-125021 affects FFmpeg 2.0 by causing memory corruption in the cmv_process_header function.

Can the attack exploiting CVE-2014-125021 be initiated remotely?

Yes, the attack exploiting CVE-2014-125021 can be initiated remotely.

What is the recommended action to fix CVE-2014-125021?

To fix CVE-2014-125021, it is recommended to apply a patch.

Where can I find more information about CVE-2014-125021?

More information about CVE-2014-125021 can be found at the following references: - [http://git.videolan.org/?p=ffmpeg.git;a=commit;h=5430839144](http://git.videolan.org/?p=ffmpeg.git;a=commit;h=5430839144) - [https://vuldb.com/?id.12299](https://vuldb.com/?id.12299)