CVE-2014-4609

Integer overflow in the get_len function in libavutil/lzo.c in Libav before 0.8.13, 9.x before 9.14, and 10.x before 10.2 allows remote attackers to execute…

published January 14, 2020

CVSS
—
EPSS
6%
Percentile
93.0
In the wild
Unconfirmed
What it is

Integer overflow in the get_len function in libavutil/lzo.c in Libav before 0.8.13, 9.x before 9.14, and 10.x before 10.2 allows remote attackers to execute arbitrary code via a crafted Literal Run.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05739 · 93.0th percentile
Published
2020-01-14T15:41Z
EPSS history
Timeline
  • 14 JAN 15:41Z
    Integer overflow in the get_len function in libavutil/lzo.c in Libav before 0.8.13, 9.x before 9.14, and 10.x before 10.2 allows remote attackers to execute…
    cvelistv5