CVE-2014-2263

FFmpeg < 2.1 - Out-of-Bounds Write in MPEG2 Transport Stream Muxer

Title source: llm
STIX 2.1

Description

The mpegts_write_pmt function in the MPEG2 transport stream (aka DVB) muxer (libavformat/mpegtsenc.c) in FFmpeg, possibly 2.1 and earlier, allows remote attackers to have unspecified impact and vectors, which trigger an out-of-bounds write.

References (6)

Core 6
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/56971
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1029850
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/91174
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/201603-06
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/65560

Scores

EPSS 0.0113
EPSS Percentile 78.6%

Details

CWE
CWE-119
Status published
Products (5)
ffmpeg/ffmpeg 2.0
ffmpeg/ffmpeg 2.0.1
ffmpeg/ffmpeg 2.0.2
ffmpeg/ffmpeg 2.0.3
ffmpeg/ffmpeg < 2.1
Published Mar 01, 2014
Tracked Since Feb 18, 2026