The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The ff_dwt_decode function in libavcodec/jpeg2000dwt.c in FFmpeg before 2.8.4 does not validate the number of decomposition levels before proceeding with Discrete Wavelet Transform decoding, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG 2000 data.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Feb 20, 2019 | Dec 23, 2015 |
| Ffmpeg | — | Upgrade to FFmpeg version 2.7.4Upgrade to FFmpeg version 2.4.12Upgrade to FFmpeg version 2.5.9Upgrade to FFmpeg version 2.8.4Upgrade to FFmpeg version 2.6.6 | Sep 29, 2017 | Dec 24, 2015 |
| Freebsd | — | Upgrade ffmpegUpgrade kodiUpgrade ffmpeg26Upgrade mencoderUpgrade plexhometheaterUpgrade ffmpeg1Upgrade ffmpeg23Upgrade ffmpeg-011Upgrade gstreamer-ffmpegUpgrade ffmpeg24Upgrade mplayerUpgrade avidemux2Upgrade ffmpeg2Upgrade mythtv-frontendUpgrade ffmpeg-develUpgrade avidemuxUpgrade ffmpeg0Upgrade libavUpgrade ffmpeg25Upgrade handbrakeUpgrade mythtvUpgrade avidemux26 | Dec 10, 2025 | Dec 28, 2015 |
| Suse | — | Upgrade libavformat57Upgrade libavutil-develUpgrade libavformat-develUpgrade libavcodec-develUpgrade libavresample3Upgrade libswscale4Upgrade libswresample2Upgrade libavresample-develUpgrade libpostproc-develUpgrade libswscale-develUpgrade libavdevice57Upgrade libavcodec57Upgrade libpostproc54Upgrade ffmpegUpgrade libswresample-develUpgrade libavfilter6Upgrade libavutil55 | Feb 2, 2016 | Dec 23, 2015 |
| Ubuntu | — | Upgrade ffmpeg | Nov 19, 2024 | Dec 24, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub