CVE-2015-8662Improper Restriction of Operations within the Bounds of a Memory Buffer in Ffmpeg

Severity
7.3HIGHNVD
EPSS
0.7%
top 28.34%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 24
Latest updateJan 20

Description

The ff_dwt_decode function in libavcodec/jpeg2000dwt.c in FFmpeg before 2.8.4 does not validate the number of decomposition levels before proceeding with Discrete Wavelet Transform decoding, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG 2000 data.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:LExploitability: 3.9 | Impact: 3.4

Affected Packages3 packages

debiandebian/ffmpeg< ffmpeg 7:2.8.4-1 (bookworm)
Debianffmpeg/ffmpeg< 7:2.8.4-1+3
NVDffmpeg/ffmpeg2.8.3

🔴Vulnerability Details

2
GHSA
GHSA-7w8c-c5qg-2948: The ff_dwt_decode function in libavcodec/jpeg2000dwt2022-05-14
OSV
CVE-2015-8662: The ff_dwt_decode function in libavcodec/jpeg2000dwt2015-12-24

📋Vendor Advisories

1
Debian
CVE-2015-8662: ffmpeg - The ff_dwt_decode function in libavcodec/jpeg2000dwt.c in FFmpeg before 2.8.4 do...2015

📄Research Papers

1
arXiv
On the Effectiveness of Function-Level Vulnerability Detectors for Inter-Procedural Vulnerabilities2024-01-20