Skip to main content

DEPRECATED: Code

CVE-2015-6823

High
7.5/10

Summary

The allocate_buffers function in "libavcodec/alac.c" in FFmpeg prior to 2.4.11, 2.5.x prior to 2.5.8, 2.6.x prior to 2.6.4, 2.7.x prior to 2.7.2 and 2.8-dev does not initialize certain context data, which allows remote attackers to cause a denial of service (segmentation violation) or possibly have unspecified other impact via crafted Apple Lossless Audio Codec (ALAC) data.

  • LOW
  • NETWORK
  • NONE
  • PARTIAL
  • PARTIAL
  • PARTIAL

CWE-17 - DEPRECATED: Code

This entry has been deprecated. It was originally used for organizing the Development View (CWE-699) and some other views, but it introduced unnecessary complexity and depth to the resulting tree.

References

Advisory Timeline

  • Published