Unscored CVE-2012-0857 EUVD-2012-0882GHSA-xr66-hfr3-pgvx

Multiple buffer overflows in the get_qcx function in the J2K decoder (j2kdec.c) in libavcode in FFmpeg before 0.9.1 allow remote attackers …

Published Aug 20, 2012 · Updated Aug 6, 2024 · Assigned by redhat

Description

Multiple buffer overflows in the get_qcx function in the J2K decoder (j2kdec.c) in libavcode in FFmpeg before 0.9.1 allow remote attackers to cause a denial of service (application crash) via unspecified vectors.

References

ffmpeg-getqcx-bo(78927) vdb-entry
[oss-security] 20120214 Re: CVE Requests for FFmpeg 0.9.1 mailing-list
http://ffmpeg.org/security.html
[oss-security] 20120201 Re: CVE Requests for FFmpeg 0.9.1 mailing-list