CVE-2013-0868
CVE-2013-0868
This page contains facts from public vulnerability sources. Check the original advisory before updating.
libavcodec/huffyuvdec.c in FFmpeg before 1.1.2 allows remote attackers to have an unspecified impact via crafted Huffyuv data, related to an out-of-bounds write and (1) unchecked return codes from the init_vlc function and (2) "len==0 cases."
EPSS 3.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=6baa54924980e1f0e8121e4715d16ed1adcd2a23
- http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=75e88db33013eaa7ab74457f5556df677b4ffb42
- http://www.ffmpeg.org/security.html
- https://security.gentoo.org/glsa/201603-06
- https://nvd.nist.gov/vuln/detail/CVE-2013-0868