FFmpeg 'libavcodec/hevc. c' empty pointer reference Denial of Service Vulnerability

Release date:
Updated on:

Affected Systems:
FFmpeg 2.x
Description:
--------------------------------------------------------------------------------
Bugtraq id: 65011

FFmpeg is a free software that allows you to perform video, transfer, and stream functions in multiple formats of audio and video.

An error occurs in the "hls_slice_header ()" function (libavcodec/hevc. c) of FFmpeg 2.1, which can lead to NULL pointer reference.

<* Source: Mateusz "j00ru" Jurczyk
Gynvael Coldwind

Link: http://secunia.com/advisories/56414/
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

FFmpeg
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://ffmpeg.org/security.html
Http://git.videolan.org /? P = ffmpeg. git; a = commitdiff; h = 22bfb4be28

FFmpeg details: click here
FFmpeg: click here

Recommended reading:

Compile FFmpeg in Linux to download and compile the source file

Linux compiling and upgrading FFmpeg

Install FFMPEG on CentOS 5.6

Install FFmpeg in Ubuntu