CVE-2013-0848

EPSS 0.71%

發布日:2013/12/7修改日:2026/4/28

也稱為:DEBIAN-CVE-2013-0848

描述

The decode_init function in libavcodec/huffyuv.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted width in huffyuv data with the predictor set to median and the colorspace set to YUV422P, which triggers an out-of-bounds array access.

受影響套件(1)

Debian/ffmpegfrom 0, < 7:2.4.1-1

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2013-0848