QwikSec

Security Database

CVE

CWE

Training

CVE-2015-6820

Published: Sep 6, 2015

Modified: Aug 6, 2024

PUBLISHED

Description

The ff_sbr_apply function in libavcodec/aacsbr.c in FFmpeg before 2.7.2 does not check for a matching AAC frame syntax element before proceeding with Spectral Band Replication calculations, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted AAC data.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=79a98294da6cd85f8c86b34764c5e0c43b09eea3

x_refsource_CONFIRM

vendor-advisory

x_refsource_UBUNTU

[debian-lts-announce] 20181220 [SECURITY] [DLA 1611-1] libav security update

mailing-list

x_refsource_MLIST

vdb-entry

x_refsource_SECTRACK

http://ffmpeg.org/security.html

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.