CVE-2014-125008

A vulnerability classified as problematic has been found in FFmpeg 2.0. Affected is the function vorbis_header of the file libavformat/oggparsevorbis.c. The manipulation leads to memory corruption. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue.

Score

CVSS 3.1 5.5 Medium

Status

Modified - cna@vuldb.com

Published

2022-06-18

Last modified

2025-04-15

Weaknesses

CWE-119, CWE-787

Affected products

• Ffmpeg (Ffmpeg)
• Ffmpeg (Unspecified)

References

• http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=f5d1d1e4667ba346ea7e0f97e6d2756bc9d4abde
• https://vuldb.com/?id.12582