QwikSec

Security Database

CVE

CWE

Training

CVE-2014-8545

Published: Nov 5, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

libavcodec/pngdec.c in FFmpeg before 2.4.2 accepts the monochrome-black format without verifying that the bits-per-pixel value is 1, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted PNG data.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://www.ffmpeg.org/security.html

x_refsource_CONFIRM

vendor-advisory

x_refsource_GENTOO

http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=3e2b745020c2dbf0201fe7df3dad9e7e0b2e1bb6

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.