Skip to main content

Integer Underflow (Wrap or Wraparound)

CVE-2015-1208

Medium
5.5/10

Summary

Integer underflow in the 'mov_read_default' function in 'libavformat/mov.c' in FFmpeg before 1.1.16, 1.2.x before 1.2.12, 2.0.x before 2.0.7, 2.1.x before 2.1.8, 2.2.x before 2.2.12, 2.3.x before 2.3.6, 2.4.x before 2.4.6 and 2.5.x before 2.5.3, allows remote attackers to obtain sensitive information from heap and/or stack memory via a crafted MP4 file.

  • LOW
  • LOCAL
  • NONE
  • UNCHANGED
  • REQUIRED
  • NONE
  • HIGH
  • NONE

CWE-191 - Integer Underflow (Wrap or Wraparound)

The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

References

Advisory Timeline

  • Published