CVE-2014-125025: FFmpeg decode_pulses memory corruption

Published Jun 19, 2022

Updated

A vulnerability classified as problematic has been found in FFmpeg 2.0. This affects the function decodepulses. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix this issue.

Affected Software

1 affected component

FFmpeg FFmpeg=2.0

Remediation

Patch Available

http://git.videolan.org/?p=ffmpeg.git;a=commit;h=6e42ccb9db

Event History

Jun 19, 2022

CVE Published

via MITRE·06:10 AM

Data Sourced

via MITRE·06:10 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2014-125025?

The severity of CVE-2014-125025 is medium with a severity value of 5.5.

How does CVE-2014-125025 affect FFmpeg 2.0?

CVE-2014-125025 affects FFmpeg 2.0 through the function decode_pulses, leading to memory corruption.

Can CVE-2014-125025 be exploited remotely?

Yes, CVE-2014-125025 can be initiated remotely.

Is there a patch available to fix CVE-2014-125025?

Yes, it is recommended to apply a patch to fix CVE-2014-125025.

Where can I find more information about CVE-2014-125025?

You can find more information about CVE-2014-125025 in the references: http://git.videolan.org/?p=ffmpeg.git;a=commit;h=6e42ccb9db and https://vuldb.com/?id.12303.