{"id":"CVE-2014-125014","state":"PUBLISHED","title":"FFmpeg HEVC Video Decoder memory corruption","description":"A vulnerability classified as problematic was found in FFmpeg 2.0. Affected by this vulnerability is an unknown functionality of the component HEVC Video Decoder. The manipulation leads to memory corruption. The attack can be launched remotely. It is recommended to apply a patch to fix this issue.","publishedAt":"2022-06-18T06:16:04.000Z","updatedAt":"2025-04-15T14:22:10.921Z","severity":{"score":5.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","source":"VulDB"},"assigner":"VulDB","products":["unspecified FFmpeg"],"affected":[{"vendor":"unspecified","product":"FFmpeg","versions":[{"version":"2.0","status":"affected"}]}],"references":["http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=d1e6602665","https://vuldb.com/?id.12367"],"weaknesses":["CWE-119"],"ingestedAt":"2026-10-29T19:41:09.984Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2014/125xxx/CVE-2014-125014.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2014-125014","state":"PUBLISHED","datePublished":"2022-06-18T06:16:04.000Z","dateUpdated":"2025-04-15T14:22:10.921Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2022-06-17T00:00:00.000Z"},"containers":{"cna":{"title":"FFmpeg HEVC Video Decoder memory corruption","descriptions":[{"lang":"en","value":"A vulnerability classified as problematic was found in FFmpeg 2.0. Affected by this vulnerability is an unknown functionality of the component HEVC Video Decoder. The manipulation leads to memory corruption. The attack can be launched remotely. It is recommended to apply a patch to fix this issue."}],"affected":[{"vendor":"unspecified","product":"FFmpeg","versions":[{"version":"2.0","status":"affected"}]}],"references":[{"url":"http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=d1e6602665","tags":["x_refsource_MISC"]},{"url":"https://vuldb.com/?id.12367","tags":["x_refsource_MISC"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","version":"3.1"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-119","description":"CWE-119 Memory Corruption","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"VulDB","dateUpdated":"2022-06-18T06:16:04.000Z","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5"},"credits":[{"lang":"en","value":"Mateusz Jurczyk/Gynvael Coldwind"}],"x_generator":"vuldb.com","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cna@vuldb.com","ID":"CVE-2014-125014","REQUESTER":"cna@vuldb.com","STATE":"PUBLIC","TITLE":"FFmpeg HEVC Video Decoder memory corruption"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"FFmpeg","version":{"version_data":[{"version_value":"2.0"}]}}]},"vendor_name":""}]}},"credit":"Mateusz Jurczyk/Gynvael Coldwind","data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A vulnerability classified as problematic was found in FFmpeg 2.0. Affected by this vulnerability is an unknown functionality of the component HEVC Video Decoder. The manipulation leads to memory corruption. The attack can be launched remotely. It is recommended to apply a patch to fix this issue."}]},"generator":"vuldb.com","impact":{"cvss":{"baseScore":"5.3","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","version":"3.1"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-119 Memory Corruption"}]}]},"references":{"reference_data":[{"name":"http://git.videolan.org/?p=ffmpeg.git;a=commit;h=d1e6602665","refsource":"MISC","url":"http://git.videolan.org/?p=ffmpeg.git;a=commit;h=d1e6602665"},{"name":"https://vuldb.com/?id.12367","refsource":"MISC","url":"https://vuldb.com/?id.12367"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=d1e6602665","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://vuldb.com/?id.12367","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-06T14:10:56.584Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-04-14T16:57:56.397871Z","id":"CVE-2014-125014","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-04-15T14:22:10.921Z"}}]}}}