Wind River Support Network


LIN6-10574 : Security Advisory - gst-ffmpeg - CVE-2015-8216

Created: Nov 29, 2015    Updated: Dec 3, 2018
Resolved Date: Dec 7, 2015
Found In Version:
Fix Version:
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Userspace


The ljpeg_decode_yuv_scan function in libavcodec/mjpegdec.c in FFmpeg before 2.8.2 omits certain width and height checks, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted MJPEG data.

Other Downloads

Live chat