7.5

CVE-2014-8545

libavcodec/pngdec.c in FFmpeg before 2.4.2 accepts the monochrome-black format without verifying that the bits-per-pixel value is 1, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted PNG data.

Data is provided by the National Vulnerability Database (NVD)
FfmpegFfmpeg Version <= 2.4.1
FfmpegFfmpeg Version0.3
FfmpegFfmpeg Version0.3.1
FfmpegFfmpeg Version0.3.2
FfmpegFfmpeg Version0.3.3
FfmpegFfmpeg Version0.3.4
FfmpegFfmpeg Version0.4.0
FfmpegFfmpeg Version0.4.2
FfmpegFfmpeg Version0.4.3
FfmpegFfmpeg Version0.4.4
FfmpegFfmpeg Version0.4.5
FfmpegFfmpeg Version0.4.6
FfmpegFfmpeg Version0.4.7
FfmpegFfmpeg Version0.4.8
FfmpegFfmpeg Version0.4.9 Updatepre1
FfmpegFfmpeg Version0.5
FfmpegFfmpeg Version0.5.1
FfmpegFfmpeg Version0.5.2
FfmpegFfmpeg Version0.5.3
FfmpegFfmpeg Version0.5.4
FfmpegFfmpeg Version0.5.4.5
FfmpegFfmpeg Version0.5.4.6
FfmpegFfmpeg Version0.5.5
FfmpegFfmpeg Version0.6
FfmpegFfmpeg Version0.6.1
FfmpegFfmpeg Version0.6.2
FfmpegFfmpeg Version0.6.3
FfmpegFfmpeg Version0.7
FfmpegFfmpeg Version0.7.1
FfmpegFfmpeg Version0.7.2
FfmpegFfmpeg Version0.7.3
FfmpegFfmpeg Version0.7.4
FfmpegFfmpeg Version0.7.5
FfmpegFfmpeg Version0.7.6
FfmpegFfmpeg Version0.7.7
FfmpegFfmpeg Version0.7.8
FfmpegFfmpeg Version0.7.9
FfmpegFfmpeg Version0.7.11
FfmpegFfmpeg Version0.7.12
FfmpegFfmpeg Version0.8.0
FfmpegFfmpeg Version0.8.1
FfmpegFfmpeg Version0.8.2
FfmpegFfmpeg Version0.8.5
FfmpegFfmpeg Version0.8.5.3
FfmpegFfmpeg Version0.8.5.4
FfmpegFfmpeg Version0.8.6
FfmpegFfmpeg Version0.8.7
FfmpegFfmpeg Version0.8.8
FfmpegFfmpeg Version0.8.10
FfmpegFfmpeg Version0.8.11
FfmpegFfmpeg Version0.9
FfmpegFfmpeg Version0.9.1
FfmpegFfmpeg Version0.10
FfmpegFfmpeg Version0.10.3
FfmpegFfmpeg Version0.10.4
FfmpegFfmpeg Version0.11
FfmpegFfmpeg Version0.11.1
FfmpegFfmpeg Version0.11.2
FfmpegFfmpeg Version0.11.3
FfmpegFfmpeg Version0.11.4
FfmpegFfmpeg Version1.0
FfmpegFfmpeg Version1.0.1
FfmpegFfmpeg Version1.0.2
FfmpegFfmpeg Version1.0.3
FfmpegFfmpeg Version1.0.4
FfmpegFfmpeg Version1.1
FfmpegFfmpeg Version1.1.1
FfmpegFfmpeg Version1.1.2
FfmpegFfmpeg Version1.1.3
FfmpegFfmpeg Version1.1.4
FfmpegFfmpeg Version1.1.5
FfmpegFfmpeg Version1.1.6
FfmpegFfmpeg Version1.1.7
FfmpegFfmpeg Version1.1.8
FfmpegFfmpeg Version1.1.9
FfmpegFfmpeg Version1.1.10
FfmpegFfmpeg Version1.1.11
FfmpegFfmpeg Version1.1.12
FfmpegFfmpeg Version1.1.13
FfmpegFfmpeg Version1.2
FfmpegFfmpeg Version1.2.1
FfmpegFfmpeg Version1.2.3
FfmpegFfmpeg Version1.2.4
FfmpegFfmpeg Version1.2.5
FfmpegFfmpeg Version1.2.6
FfmpegFfmpeg Version1.2.7
FfmpegFfmpeg Version2.0
FfmpegFfmpeg Version2.0.1
FfmpegFfmpeg Version2.0.2
FfmpegFfmpeg Version2.0.3
FfmpegFfmpeg Version2.0.4
FfmpegFfmpeg Version2.0.5
FfmpegFfmpeg Version2.1
FfmpegFfmpeg Version2.1.1
FfmpegFfmpeg Version2.1.2
FfmpegFfmpeg Version2.1.3
FfmpegFfmpeg Version2.1.4
FfmpegFfmpeg Version2.1.5
FfmpegFfmpeg Version2.2
FfmpegFfmpeg Version2.2.4
FfmpegFfmpeg Version2.3
FfmpegFfmpeg Version2.3.2
FfmpegFfmpeg Version2.3.3
FfmpegFfmpeg Version2.3.4
FfmpegFfmpeg Version2.4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1.02% 0.752
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P