CVE-2014-2098 PUBLISHED CVSS 6.800000190734863 MEDIUM

libavcodec/wmalosslessdec.c in FFmpeg before 2.1.4 uses an incorrect data-structure size for certain coefficients, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted WMA data.

EPSS 0.43% · 62.3th percentile

Risk Scores

CVSS v2.0
6.800000190734863
EPSS Score
0.43%
62.3th percentile

Affected Products

VendorProductVersions
ffmpegffmpeg2.1.2, 0, 2.0
n/an/an/a

Timeline

References

Open in Interactive Console →