CVE-2015-3417
EPSS 1.0%Published: 4/24/2015Modified: 4/28/2026
Description
Use-after-free vulnerability in the ff_h264_free_tables function in libavcodec/h264.c in FFmpeg before 2.3.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted H.264 data in an MP4 file, as demonstrated by an HTML VIDEO element that references H.264 data.
Affected packages (1)
- Debian/ffmpegfrom 0, < 7:2.6.1-1