CVE-2015-1872
The ff_mjpeg_decode_sof function in libavcodec/mjpegdec.c in FFmpeg before 2.5.4 does not...
CVE-2015-1872 is a medium vulnerability (CVSS 6.8) in Ffmpeg, published May 18, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.11%, the 82nd percentile. Fixed in ffmpeg 7:2.5.4-1.
- Severity
- 6.8 MediumCVSS 2.0, NVD
- Exploit chance
- 2.11%EPSS, 82nd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
7:2.5.4-1ffmpeg +13 more
Description
The ff_mjpeg_decode_sof function in libavcodec/mjpegdec.c in FFmpeg before 2.5.4 does not validate the number of components in a JPEG-LS Start Of Frame segment, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Motion JPEG data.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ffmpegDebian:12 | before 7:2.5.4-1 | 7:2.5.4-1 |
ffmpegDebian:13 | before 7:2.5.4-1 | 7:2.5.4-1 |
ffmpegDebian:14 | before 7:2.5.4-1 | 7:2.5.4-1 |
libavDebian:8 From an advisory covering 5 CVEs | before 6:11.12-1~deb8u6, plus listed versions 6:11.11-1~deb8u16:11.12-1~deb8u16:11.12-1~deb8u26:11.12-1~deb8u36:11.12-1~deb8u4 Show 13 moreShow less6:11.12-1~deb8u56:11.3-16:11.3-1+deb8u16:11.3-26:11.3-36:11.4-16:11.4-1~deb8u16:11.4-26:11.4-2+x32.16:11.6-1~deb8u16:11.7-1~deb8u16:11.8-1~deb8u16:11.9-1~deb8u1 | 6:11.12-1~deb8u6 |
libavDebian:7 From an advisory covering 3 CVEs | before 6:0.8.18-0+deb7u1, plus listed versions 6:0.8.10-16:0.8.12-16:0.8.13-16:0.8.15-16:0.8.16-1 Show 8 moreShow less6:0.8.17-16:0.8.17-26:0.8.17-2+deb7u16:0.8.17-2+deb7u26:0.8.6-16:0.8.7-16:0.8.8-16:0.8.9-1 | 6:0.8.18-0+deb7u1 |
avidemuxMageia:4 From an advisory covering 6 CVEs | before 2.6.6-2.3.mga4 | 2.6.6-2.3.mga4 |
avidemuxMageia:4 From an advisory covering 6 CVEs | before 2.6.6-2.3.mga4.tainted | 2.6.6-2.3.mga4.tainted |
ffmpegMageia:4 From an advisory covering 8 CVEs | before 2.0.7-1.mga4 | 2.0.7-1.mga4 |
ffmpegMageia:4 From an advisory covering 8 CVEs | before 2.0.7-1.mga4.tainted | 2.0.7-1.mga4.tainted |
libavUbuntu:Pro:14.04:LTS | All versions, plus listed versions 6:0.8.7-1ubuntu26:9.10-1ubuntu16:9.10-1ubuntu26:9.10-1ubuntu56:9.10-1ubuntu6 Show 9 moreShow less6:9.10-1ubuntu76:9.11-2ubuntu16:9.11-2ubuntu26:9.13-0ubuntu0.14.04.16:9.14-0ubuntu0.14.04.16:9.16-0ubuntu0.14.04.16:9.18-0ubuntu0.14.04.16:9.20-0ubuntu0.14.04.16:9.20-0ubuntu0.14.04.1+esm1 | None known |
Show 4 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kinoUbuntu:16.04:LTS | All versions, plus listed versions 1.3.4-2.1build2 | None known |
kinoUbuntu:18.04:LTS | All versions, plus listed versions 1.3.4-2.31.3.4-2.4 | None known |
kinoUbuntu:20.04:LTS | All versions, plus listed versions 1.3.4+dfsg0-11.3.4+dfsg0-1build1 | None known |
kinoUbuntu:22.04:LTS | All versions, plus listed versions 1.3.4+dfsg0-1build21.3.4+dfsg0-1.1 | None known |
What each source reports
NVD Score used
The ff_mjpeg_decode_sof function in libavcodec/mjpegdec.c in FFmpeg before 2.5.4 does not validate the number of components in a JPEG-LS Start Of Frame segment, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Motion JPEG data.
- Record
CVE-2015-1872- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
The ff_mjpeg_decode_sof function in libavcodec/mjpegdec.c in FFmpeg before 2.5.4 does not validate the number of components in a JPEG-LS Start Of Frame segment, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Motion JPEG data.
- Record
CVE-2015-1872- Updated
- 2026-11-02
EUVDEUVD-2015-1978No score
The ff_mjpeg_decode_sof function in libavcodec/mjpegdec.c in FFmpeg before 2.5.4 does not validate the number of components in a JPEG-LS Start Of Frame segment, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Motion JPEG data.
- Record
EUVD-2015-1978- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qcq8-x6c3-9rx4No score
The ff_mjpeg_decode_sof function in libavcodec/mjpegdec.c in FFmpeg before 2.5.4 does not...
The ff_mjpeg_decode_sof function in libavcodec/mjpegdec.c in FFmpeg before 2.5.4 does not validate the number of components in a JPEG-LS Start Of Frame segment, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Motion JPEG data.
- Record
GHSA-qcq8-x6c3-9rx4- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVNo score
The ff_mjpeg_decode_sof function in libavcodec/mjpegdec.c in FFmpeg before 2.5.4 does not validate the number of components in a JPEG-LS Start Of Frame segment, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Motion JPEG data.
- Record
CVE-2015-1872- Updated
- 2026-11-02
OSVDEBIAN-CVE-2015-1872No score
The ff_mjpeg_decode_sof function in libavcodec/mjpegdec.c in FFmpeg before 2.5.4 does not validate the number of components in a JPEG-LS Start Of Frame segment, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Motion JPEG data.
- Record
DEBIAN-CVE-2015-1872- Updated
- 2026-11-02
OSVMGASA-2015-0233No score
Updated avidemux packages fix security vulnerabilities
Updated avidemux packages fix security vulnerabilities:
The mjpeg_decode_app function in libavcodec/mjpegdec.c in FFMpeg before 1.2.11 allows remote attackers to cause a denial of service (out-of-bounds heap access) and possibly have other unspecified impact via vectors related to LJIF tags in an MJPEG file (CVE-2014-9316).
The decode_ihdr_chunk function in libavcodec/pngdec.c in FFMpeg before 1.2.11 allows remote attackers to cause a denial of service (out-of-bounds heap access) and possibly have other unspecified impact via an IDAT before an IHDR in a PNG file (CVE-2014-9317).
The vmd_decode function in libavcodec/vmdvideo.c in FFmpeg before 1.2.11 does not validate the relationship between a certain length value and the frame width, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Sierra VMD video data (CVE-2014-9603).
libavcodec/utvideodec.c in FFmpeg before 1.2.11 does not check for a zero value of a slice height, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Ut Video data, related to the restore_median and restore_median_il functions (CVE-2014-9604).
An attacker can force a read at an invalid address in mjpegdec.c of FFmpeg, in order to trigger a denial of service (CVE-2015-1872).
Use-after-free vulnerability in the ff_h264_free_tables function in libavcodec/h264.c in FFmpeg before 1.2.11 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted H.264 data in an MP4 file, as demonstrated by an HTML VIDEO element that references H.264 data (CVE-2015-3417).
Avidemux is built with a bundled set of FFmpeg libraries. The bundled FFmpeg version has been updated from 1.2.10 to 1.2.12 to fix these security issues and other bugs fixed upstream in FFmpeg.
- Record
MGASA-2015-0233- Updated
- 2026-11-02
OSVMGASA-2015-0245No score
Updated ffmpeg package fixes security vulnerability
The mjpeg_decode_app function in libavcodec/mjpegdec.c in FFMpeg before 2.0.7 allows remote attackers to cause a denial of service (out-of-bounds heap access) and possibly have other unspecified impact via vectors related to LJIF tags in an MJPEG file (CVE-2014-9316).
The decode_ihdr_chunk function in libavcodec/pngdec.c in FFMpeg before 2.0.7 allows remote attackers to cause a denial of service (out-of-bounds heap access) and possibly have other unspecified impact via an IDAT before an IHDR in a PNG file (CVE-2014-9317).
The raw_decode function in libavcodec/rawdec.c in FFMpeg before 2.0.7 allows remote attackers to cause a denial of service (out-of-bounds heap access) and possibly have other unspecified impact via a crafted .cine file that triggers the avpicture_get_size function to return a negative frame size (CVE-2014-9318).
The vmd_decode function in libavcodec/vmdvideo.c in FFmpeg before 2.0.7 does not validate the relationship between a certain length value and the frame width, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Sierra VMD video data (CVE-2014-9603).
libavcodec/utvideodec.c in FFmpeg before 2.0.7 does not check for a zero value of a slice height, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Ut Video data, related to the restore_median and restore_median_il functions (CVE-2014-9604).
An attacker can force a read at an invalid address in mjpegdec.c of FFmpeg, in order to trigger a denial of service (CVE-2015-1872).
The msrle_decode_pal4 function in libavcodec/msrledec.c in FFmpeg before 2.0.7 has an out-of-bounds array access that may allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted BMP file (CVE-2015-3395).
Use-after-free vulnerability in the ff_h264_free_tables function in libavcodec/h264.c in FFmpeg before 2.0.7 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted H.264 data in an MP4 file, as demonstrated by an HTML VIDEO element that references H.264 data (CVE-2015-3417).
- Record
MGASA-2015-0245- Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-1872No score
The ff_mjpeg_decode_sof function in libavcodec/mjpegdec.c in FFmpeg before 2.5.4 does not validate the number of components in a JPEG-LS Start Of Frame segment, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Motion JPEG data.
- Record
UBUNTU-CVE-2015-1872- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
git.videolan.org?p=ffmpeg.git%3Ba=commit%3Bh=fabbfaa095660982cc0bc63242c459561fa37037
ubuntu.com/usn/USN-2944-1
securitytracker.com/id/1033078
securityfocus.com/bid/72644
lists.debian.org/debian-lts-announce/2019/03/msg00041.html
nvd.nist.gov/vuln/detail/CVE-2015-1872
Show 15 moreShow less
github.com/advisories/GHSA-qcq8-x6c3-9rx4
security-tracker.debian.org/tracker/CVE-2015-1872
advisories.mageia.org/MGASA-2015-0233.html
bugs.mageia.org/show_bug.cgi?id=15965
vigilance.fr/vulnerability/FFmpeg-unreachable-memory-reading-via-mjpegdec-c-16213
ffmpeg.org/olddownload.html
ubuntu.com/security/CVE-2015-1872
cve.org/CVERecord?id=CVE-2015-1872