CVE-2014-9318

Published: Dec 9, 2014Modified: May 6, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The raw_decode function in libavcodec/rawdec.c in FFMpeg before 2.1.6, 2.2.x through 2.3.x, and 2.4.x before 2.4.4 allows remote attackers to cause a denial of service (out-of-bounds heap access) and possibly have other unspecified impact via a crafted .cine file that triggers the avpicture_get_size function to return a negative frame size.

Affected (12)

Products: Ffmpeg: Ffmpeg

Ffmpeg

1 product

Ffmpeg

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Ffmpeg Ffmpeg	Up to 2.1.5
Ffmpeg Ffmpeg	Version 2.2.4
Ffmpeg Ffmpeg	Version 2.2
Ffmpeg Ffmpeg	Version 2.3.2
Ffmpeg Ffmpeg	Version 2.3.3
Ffmpeg Ffmpeg	Version 2.3.4
Ffmpeg Ffmpeg	Version 2.3.5
Ffmpeg Ffmpeg	Version 2.3
Ffmpeg Ffmpeg	Version 2.4.1
Ffmpeg Ffmpeg	Version 2.4.2
Ffmpeg Ffmpeg	Version 2.4.3
Ffmpeg Ffmpeg	Version 2.4