← Back

CVE-2013-0848

nvd nist
Published: Dec 7, 2013Modified: Apr 29, 2026

JSON object

Loading...
9.3
Vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
Exploitability: 8.6 / Impact: 10.0
Source: NVD

Description

The decode_init function in libavcodec/huffyuv.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted width in huffyuv data with the predictor set to median and the colorspace set to YUV422P, which triggers an out-of-bounds array access.

Affected (55)

Products: Ffmpeg: Ffmpeg
1 product
Ffmpeg
Configuration A
55 vulnerable
Vulnerable SoftwareAffected Versions
Ffmpeg
Up to 1.0
Version 0.10.3
Version 0.10.4
Version 0.10
Version 0.11
Version 0.3.1
Version 0.3.2
Version 0.3.3
Version 0.3.4
Version 0.3
Version 0.4.0
Version 0.4.2
Version 0.4.3
Version 0.4.4
Version 0.4.5
Version 0.4.6
Version 0.4.7
Version 0.4.8
Version 0.4.9 pre1
Version 0.5.1
Version 0.5.2
Version 0.5.3
Version 0.5.4.5
Version 0.5.4.6
Version 0.5.4
Version 0.5
Version 0.6.1
Version 0.6.2
Version 0.6.3
Version 0.6
Version 0.7.11
Version 0.7.12
Version 0.7.1
Version 0.7.2
Version 0.7.3
Version 0.7.4
Version 0.7.5
Version 0.7.6
Version 0.7.7
Version 0.7.8
Version 0.7.9
Version 0.7
Version 0.8.0
Version 0.8.10
Version 0.8.11
Version 0.8.1
Version 0.8.2
Version 0.8.5.3
Version 0.8.5.4
Version 0.8.5
Version 0.8.6
Version 0.8.7
Version 0.8.8
Version 0.9.1
Version 0.9

Timeline

No history available yet.