Skip to main content

Out-of-bounds Write

CVE-2017-7862

High
9.8/10

Summary

FFmpeg versions before 2.4.14, 2.5.x before 2.8.11, 2.9.x before 3.0.7, 3.1.x before 3.1.7, 3.2.x before 3.2.4, and 3.3-dev has an out-of-bounds write caused by a heap-based buffer overflow related to the decode_frame function in "libavcodec/pictordec.c".

  • LOW
  • NETWORK
  • HIGH
  • UNCHANGED
  • NONE
  • NONE
  • HIGH
  • HIGH

CWE-787 - Out-of-Bounds Write

Out-of-bounds write vulnerability is a memory access bug that allows software to write data past the end or before the beginning of the intended buffer. This may result in the corruption of data, a crash, or arbitrary code execution.

References

Advisory Timeline

  • Published