Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r535-xgmj-mh27

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The init_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.2 does not enforce minimum-value and maximum-value constraints on tile coordinates, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG 2000 data.

The init_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.2 does not enforce minimum-value and maximum-value constraints on tile coordinates, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG 2000 data.

EPSS

Процентиль: 64%
0.0046
Низкий

Дефекты

CWE-20

Связанные уязвимости

ubuntu
около 10 лет назад

The init_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.2 does not enforce minimum-value and maximum-value constraints on tile coordinates, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG 2000 data.

nvd
около 10 лет назад

The init_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.2 does not enforce minimum-value and maximum-value constraints on tile coordinates, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG 2000 data.

debian
около 10 лет назад

The init_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2. ...

fstec
около 10 лет назад

Уязвимость мультимедийной библиотеки FFmpeg, позволяющая нарушителю вызвать отказ в обслуживании

suse-cvrf
около 10 лет назад

Security update for ffmpeg

EPSS

Процентиль: 64%
0.0046
Низкий

Дефекты

CWE-20