CVE-2014-125014CWE-119

FFmpeg HEVC Video Decoder memory corruption

Medium · published June 18, 2022

CVSS v3.1

5.3

EPSS

Percentile

52.4

In the wild

Unconfirmed

What it is

A vulnerability classified as problematic was found in FFmpeg 2.0. Affected by this vulnerability is an unknown functionality of the component HEVC Video Decoder. The manipulation leads to memory corruption. The attack can be launched remotely. It is recommended to apply a patch to fix this issue.

The record

Technical detail

CVSS v3.1: 5.3 · MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0: Not supplied
EPSS: 0.00695 · 52.4th percentile
Weakness: CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published: 2022-06-18T06:16Z

EPSS history

Timeline

18 JUN 06:16Z
FFmpeg HEVC Video Decoder memory corruption
cvelistv5