CVE-2013-0868
libavcodec/huffyuvdec.c in FFmpeg before 1.1.2 allows remote attackers to have an unspecified impact via crafted Huffyuv data, related to an out-of-bounds write and (1) unchecked return codes from the init_vlc function and (2) "len==0 cases."
- Score
- CVSS 2.0 9.3 Critical
- Status
- Modified - chrome-cve-admin@google.com
- Published
- 2013-11-23
- Last modified
- 2024-08-06
- Weaknesses
- CWE-119
Affected products
References
- http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=6baa54924980e1f0e8121e4715d16ed1adcd2a23
- http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=75e88db33013eaa7ab74457f5556df677b4ffb42
- http://www.ffmpeg.org/security.html
- https://security.gentoo.org/glsa/201603-06
