CVE-2014-125014

NameCVE-2014-125014
DescriptionA vulnerability classified as problematic was found in FFmpeg 2.0. Affected by this vulnerability is an unknown functionality of the component HEVC Video Decoder. The manipulation leads to memory corruption. The attack can be launched remotely. It is recommended to apply a patch to fix this issue.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
ffmpeg (PTS)buster7:4.1.9-0+deb10u1fixed
buster (security)7:4.1.11-0+deb10u1fixed
bullseye (security), bullseye7:4.3.6-0+deb11u1fixed
bookworm7:5.1.3-1fixed
bookworm (security)7:5.1.4-0+deb12u1fixed
trixie7:6.1-3fixed
sid7:6.1-5fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
ffmpegsource(unstable)(not affected)

Notes

- ffmpeg <not-affected> (Fixed before re-introduction to Debian as src:ffmpeg)
Fixed by: http://git.videolan.org/?p=ffmpeg.git;a=commit;h=d1e6602665d5ec1b7e211ab27b298c26139f82cc (n2.2-rc1)

Search for package or bug name: Reporting problems