CVE-2014-9676 | BDVDB-2026-68255 Detail

Description#

The seg_write_packet function in libavformat/segment.c in ffmpeg 2.1.4 and earlier does not free the correct memory location, which allows remote attackers to cause a denial of service ("invalid memory handler") and possibly execute arbitrary code via a crafted video that triggers a use after free.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://seclists.org/oss-sec/2015/q1/38
https://security.gentoo.org/glsa/201606-09

Exploit#

No public exploit known

History#

Version 12015-02-28Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.