Description (CNA)
An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically in the MagicYUV decoder, allows denial-of-service and, in some cases, can be exploited for remote code execution. This vulnerability is associated with the file libavcodec/magicyuv.C. This issue affects FFmpeg before version 8.1.2.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| FFmpeg / FFmpeg | affected 0 before 8.1.2 |
CWE
CWE-787
References
ADP enrichment
No English description supplied.
No references supplied.
A flaw was found in FFmpeg's libavcodec library. This out-of-bounds write vulnerability, specifically within the MagicYUV decoder, could allow a remote attacker to execute arbitrary code on the affected system. In other scenarios, it may lead to a denial-of-service, making the system unavailable.