Description
The seg_write_packet function in libavformat/segment.c in ffmpeg 2.1.4 and earlier does not free the correct memory location, which allows remote attackers to cause a denial of service ("invalid memory handler") and possibly execute arbitrary code via a crafted video that triggers a use after free.
References (2)
Core 2
Core References
Exploit mailing-list
x_refsource_mlist
http://seclists.org/oss-sec/2015/q1/38
Third Party Advisory vendor-advisory
x_refsource_gentoo
https://security.gentoo.org/glsa/201606-09
Scores
EPSS
0.0161
EPSS Percentile
82.0%
Details
Status
published
Products (1)
ffmpeg/ffmpeg
< 2.1.4
Published
Feb 28, 2015
Tracked Since
Feb 18, 2026