Integer overflow in the ff_ivi_init_planes function in libavcodec/ivi.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 allows remote attackers to cause a denial of service (out-of-bounds heap-memory access) or possibly have unspecified other impact via crafted image dimensions in Indeo Video Interactive data.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Feb 20, 2019 | Nov 26, 2015 |
| Ffmpeg | — | Upgrade to FFmpeg version 2.4.12Upgrade to FFmpeg version 2.5.9Upgrade to FFmpeg version 2.8.3Upgrade to FFmpeg version 2.7.3Upgrade to FFmpeg version 2.6.5 | Sep 29, 2017 | Nov 26, 2015 |
| Freebsd | — | Upgrade ffmpeg23Upgrade ffmpeg26Upgrade mythtvUpgrade mencoderUpgrade avidemux26Upgrade gstreamer-ffmpegUpgrade ffmpeg24Upgrade plexhometheaterUpgrade mplayerUpgrade ffmpegUpgrade ffmpeg-develUpgrade avidemuxUpgrade ffmpeg25Upgrade mythtv-frontendUpgrade ffmpeg2Upgrade ffmpeg1Upgrade handbrakeUpgrade kodiUpgrade avidemux2Upgrade ffmpeg0Upgrade libavUpgrade ffmpeg-011 | Dec 10, 2025 | Dec 2, 2015 |
| Suse | — | Upgrade libavcodec-develUpgrade libswresample2Upgrade libavresample3Upgrade libavresample-develUpgrade libavformat-develUpgrade libswscale4Upgrade libavformat57Upgrade libavfilter6Upgrade libswscale-develUpgrade libpostproc-develUpgrade ffmpegUpgrade libswresample-develUpgrade libavcodec57Upgrade libavutil-develUpgrade libavdevice57Upgrade libpostproc54Upgrade libavutil55 | Jan 4, 2016 | Nov 26, 2015 |
| Ubuntu | — | Upgrade libavcodec53Upgrade libavformat53 | Apr 4, 2016 | Nov 26, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub