← Back

CVE-2014-2099

nvd nist
Published: Mar 2, 2014Modified: Apr 29, 2026

JSON object

Loading...
6.8
Vector
AV:N/AC:M/Au:N/C:P/I:P/A:P
Exploitability: 8.6 / Impact: 6.4
Source: NVD

Description

The msrle_decode_frame function in libavcodec/msrle.c in FFmpeg before 2.1.4 does not properly calculate line sizes, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Microsoft RLE video data.

Affected (8)

Products: Ffmpeg: Ffmpeg
1 product
Ffmpeg
Configuration A
8 vulnerable
Vulnerable SoftwareAffected Versions
Ffmpeg
Up to 2.1.3
Version 2.0.1
Version 2.0.2
Version 2.0.3
Version 2.0
Version 2.1.1
Version 2.1.2
Version 2.1

Related CWEs

Timeline

No history available yet.