← Back

CVE-2013-0865

nvd nist
Published: Nov 23, 2013Modified: Apr 29, 2026

JSON object

Loading...
9.3
Vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
Exploitability: 8.6 / Impact: 10.0
Source: NVD

Description

The vqa_decode_chunk function in libavcodec/vqavideo.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.2 allows remote attackers to have an unspecified impact via a large (1) cbp0 or (2) cbpz chunk in Westwood Studios VQA Video file, which triggers an out-of-bounds write.

Affected (59)

Products: Ffmpeg: Ffmpeg
1 product
Ffmpeg
Configuration A
59 vulnerable
Vulnerable SoftwareAffected Versions
Ffmpeg
Up to 1.0.2
Version 0.10.3
Version 0.10.4
Version 0.10
Version 0.11
Version 0.3.1
Version 0.3.2
Version 0.3.3
Version 0.3.4
Version 0.3
Version 0.4.0
Version 0.4.2
Version 0.4.3
Version 0.4.4
Version 0.4.5
Version 0.4.6
Version 0.4.7
Version 0.4.8
Version 0.4.9 pre1
Version 0.5.1
Version 0.5.2
Version 0.5.3
Version 0.5.4.5
Version 0.5.4.6
Version 0.5.4
Version 0.5
Version 0.6.1
Version 0.6.2
Version 0.6.3
Version 0.6
Version 0.7.11
Version 0.7.12
Version 0.7.1
Version 0.7.2
Version 0.7.3
Version 0.7.4
Version 0.7.5
Version 0.7.6
Version 0.7.7
Version 0.7.8
Version 0.7.9
Version 0.7
Version 0.8.0
Version 0.8.10
Version 0.8.11
Version 0.8.1
Version 0.8.2
Version 0.8.5.3
Version 0.8.5.4
Version 0.8.5
Version 0.8.6
Version 0.8.7
Version 0.8.8
Version 0.9.1
Version 0.9
Version 1.0.1
Version 1.0
Version 1.1.1
Version 1.1

Timeline

No history available yet.