QwikSec

Security Database

CVE

CWE

Training

CVE-2015-6822

Published: Sep 6, 2015

Modified: Aug 6, 2024

PUBLISHED

Description

The destroy_buffers function in libavcodec/sanm.c in FFmpeg before 2.7.2 does not properly maintain height and width values in the video context, which allows remote attackers to cause a denial of service (segmentation violation and application crash) or possibly have unspecified other impact via crafted LucasArts Smush video data.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

[debian-lts-announce] 20181220 [SECURITY] [DLA 1611-1] libav security update

mailing-list

x_refsource_MLIST

vdb-entry

x_refsource_SECTRACK

http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=39bbdebb1ed8eb9c9b0cd6db85afde6ba89d86e4

x_refsource_CONFIRM

[debian-lts-announce] 20181221 [SECURITY] [DLA 1611-2] libav security update

mailing-list

x_refsource_MLIST

http://ffmpeg.org/security.html

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.