Vulnetix
Try Vulnetix Request Demo
CVE-2015-8216 REJECTED

The ljpeg_decode_yuv_scan function in libavcodec/mjpegdec.c in FFmpeg before 2.8.2 omits certain width and height checks, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted MJPEG data.

EPSS 0.52% · 66.6th percentile

Risk Scores

EPSS Score
0.52%
66.6th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSffmpeg0, 7:2.7.2-1build1, 7:2.8.1-1ubuntu1

Timeline

References

Open in Interactive Console →