Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2015-3417

Use-after-free vulnerability in the ff_h264_free_tables function in libavcodec/h264.c in FFmpeg before 2.3.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted H.264 data in an MP4 file, as demonstrated by an HTML VIDEO element that references H.264 data.

  • Published: Apr 24, 2015
  • Updated: Apr 13, 2023
  • CVE: CVE-2015-3417
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.8
  • AV:N/AC:M/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
ffmpeg / ffmpeg - 2.3.5.x
debian / debian_linux 8.0 8.0.x