Security Advisory

CVE-2015-8218

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-11-17 01:00:00
Last updated 2024-08-06 08:13:31
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

The decode_uncompressed function in libavcodec/faxcompr.c in FFmpeg before 2.8.2 does not validate uncompressed runs, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted CCITT FAX data.