CVE-2015-6825 REJECTED

The ff_frame_thread_init function in libavcodec/pthread_frame.c in FFmpeg before 2.7.2 mishandles certain memory-allocation failures, which allows remote attackers to cause a denial of service (invalid pointer access) or possibly have unspecified other impact via a crafted file, as demonstrated by an AVI file.

EPSS 0.71% · 72.2th percentile

Risk Scores

EPSS Score
0.71%
72.2th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSffmpeg0, 7:2.7.2-1build1, 7:2.8.1-1ubuntu1

Timeline

References

Open in Interactive Console →