QwikSec

Security Database

CVE

CWE

Training

CVE-2013-7023

Published: Dec 9, 2013

Modified: Aug 6, 2024

PUBLISHED

Description

The ff_combine_frame function in libavcodec/parser.c in FFmpeg before 2.1 does not properly handle certain memory-allocation errors, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted data.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://github.com/FFmpeg/FFmpeg/commit/f31011e9abfb2ae75bb32bc44e2c34194c8dc40a

x_refsource_CONFIRM

vendor-advisory

x_refsource_GENTOO

https://trac.ffmpeg.org/ticket/2982

x_refsource_CONFIRM

http://ffmpeg.org/security.html

x_refsource_CONFIRM

[oss-security] 20131208 Re: CVE Request: FFmpeg 2.1 multiple problems

mailing-list

x_refsource_MLIST

[oss-security] 20131126 CVE Request: FFmpeg 2.1 multiple problems

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.