CVE-2014-4610

Integer overflow in the get_len function in libavutil/lzo.c in FFmpeg before 0.10.14, 1.1.x before 1.1.12, 1.2.x before 1.2.7, 2.0.x before 2.0.5, 2.1.x before…

published January 14, 2020

CVSS
—
EPSS
4%
Percentile
91.4
In the wild
Unconfirmed
What it is

Integer overflow in the get_len function in libavutil/lzo.c in FFmpeg before 0.10.14, 1.1.x before 1.1.12, 1.2.x before 1.2.7, 2.0.x before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.4 allows remote attackers to execute arbitrary code via a crafted Literal Run.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04468 · 91.4th percentile
Published
2020-01-14T15:41Z
EPSS history
Timeline
  • 14 JAN 15:41Z
    Integer overflow in the get_len function in libavutil/lzo.c in FFmpeg before 0.10.14, 1.1.x before 1.1.12, 1.2.x before 1.2.7, 2.0.x before 2.0.5, 2.1.x before…
    cvelistv5