CVE-2014-125022: FFmpeg Bitstream Buffer shorten_decode_frame memory corruption
Published Jun 19, 2022
·Updated
A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. Affected is the function shortendecodeframe of the component Bitstream Buffer. The manipulation leads to memory corruption. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue.
Affected Software
1 affected component
FFmpeg FFmpeg=2.0
Remediation
Patch Available
Event History
Jun 19, 2022
CVE Published
via MITRE·06:10 AM
Data Sourced
via MITRE·06:10 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2014-125022?
The severity of CVE-2014-125022 is medium with a CVSS score of 5.5.
2
How can I determine if I am affected by CVE-2014-125022?
If you are using FFmpeg version 2.0, you may be affected by CVE-2014-125022.
3
What is the recommended solution for CVE-2014-125022?
To mitigate the vulnerability, apply the provided patch from the official FFmpeg website.
4
Can CVE-2014-125022 be exploited remotely?
Yes, CVE-2014-125022 can be exploited remotely.
5
What is the CWE ID for CVE-2014-125022?
The CWE ID for CVE-2014-125022 is CWE-787 and CWE-119.