Vulnetix
Try Vulnetix Request Demo
CVE-2017-14169 PUBLISHED

In the mxf_read_primer_pack function in libavformat/mxfdec.c in FFmpeg 3.3.3 -> 2.4, an integer signedness error might occur when a crafted file, which claims a large "item_num" field such as 0xffffffff, is provided. As a result, the variable "item_num" turns negative, bypassing the check for a large value.

EPSS 0.24% · 46.6th percentile

Risk Scores

EPSS Score
0.24%
46.6th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSffmpeg0, 7:2.7.2-1build1, 7:2.8.1-1ubuntu1

Timeline

References

Open in Interactive Console →