{"id":"CVE-2014-5271","aliases":["EUVD-2014-5164","GHSA-qmmw-8mm8-4p5g","MGASA-2014-0464","MGASA-2014-0473","MGASA-2014-0491","UBUNTU-CVE-2014-5271"],"status":"published","title":"Heap-based buffer overflow in the encode_slice function in libavcodec/proresenc_kostya.c in...","description":"Heap-based buffer overflow in the encode_slice function in libavcodec/proresenc_kostya.c in FFMpeg before 1.1.14, 1.2.x before 1.2.8, 2.x before 2.2.7, and 2.3.x before 2.3.3 and Libav before 10.5 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.04697,"percentile":0.91861,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119"],"published":"2014-11-03T16:00:00Z","modified":"2026-10-17T12:52:40Z","affected":[{"source":"osv","ecosystem":"Mageia:4","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-1.mga4"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:4","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-1.mga4.tainted"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:3","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.14-1.mga3"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:3","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.14-1.mga3.tainted"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:4","package":"avidemux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-2.2.mga4"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:4","package":"avidemux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-2.2.mga4.tainted"}]}],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6:0.8.7-1ubuntu2","6:9.10-1ubuntu1","6:9.10-1ubuntu2","6:9.10-1ubuntu5","6:9.10-1ubuntu6","6:9.10-1ubuntu7","6:9.11-2ubuntu1","6:9.11-2ubuntu2","6:9.13-0ubuntu0.14.04.1","6:9.14-0ubuntu0.14.04.1","6:9.16-0ubuntu0.14.04.1","6:9.18-0ubuntu0.14.04.1","6:9.20-0ubuntu0.14.04.1","6:9.20-0ubuntu0.14.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7:2.7.2-1build1","7:2.8.1-1ubuntu1","7:2.8.2-1ubuntu1","7:2.8.3-1","7:2.8.4-1","7:2.8.4-1ubuntu1","7:2.8.4-1ubuntu2","7:2.8.4-1ubuntu3","7:2.8.4-1ubuntu4","7:2.8.6-1ubuntu1","7:2.8.6-1ubuntu2","7:2.8.8-0ubuntu0.16.04.1","7:2.8.10-0ubuntu0.16.04.1","7:2.8.11-0ubuntu0.16.04.1","7:2.8.14-0ubuntu0.16.04.1","7:2.8.15-0ubuntu0.16.04.1","7:2.8.15-0ubuntu0.16.04.1+esm1","7:2.8.17-0ubuntu0.1","7:2.8.17-0ubuntu0.1+esm1","7:2.8.17-0ubuntu0.1+esm2","7:2.8.17-0ubuntu0.1+esm3","7:2.8.17-0ubuntu0.1+esm4","7:2.8.17-0ubuntu0.1+esm5","7:2.8.17-0ubuntu0.1+esm6","7:2.8.17-0ubuntu0.1+esm7","7:2.8.17-0ubuntu0.1+esm8","7:2.8.17-0ubuntu0.1+esm9","7:2.8.17-0ubuntu0.1+esm10","7:2.8.17-0ubuntu0.1+esm11","7:2.8.17-0ubuntu0.1+esm12","7:2.8.17-0ubuntu0.1+esm13","7:2.8.17-0ubuntu0.1+esm14","7:2.8.17-0ubuntu0.1+esm15","7:2.8.17-0ubuntu0.1+esm16","7:2.8.17-0ubuntu0.1+esm17","7:2.8.17-0ubuntu0.1+esm18"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7:3.3.4-2","7:3.3.4-2build3","7:3.4-2ubuntu2","7:3.4-4","7:3.4-4build1","7:3.4.1-1","7:3.4.1-1build1","7:3.4.2-1","7:3.4.2-1build1","7:3.4.2-2","7:3.4.4-0ubuntu0.18.04.1","7:3.4.6-0ubuntu0.18.04.1","7:3.4.8-0ubuntu0.2","7:3.4.11-0ubuntu0.1","7:3.4.11-0ubuntu0.1+esm1","7:3.4.11-0ubuntu0.1+esm2","7:3.4.11-0ubuntu0.1+esm3","7:3.4.11-0ubuntu0.1+esm4","7:3.4.11-0ubuntu0.1+esm5","7:3.4.11-0ubuntu0.1+esm6","7:3.4.11-0ubuntu0.1+esm7","7:3.4.11-0ubuntu0.1+esm8","7:3.4.11-0ubuntu0.1+esm9","7:3.4.11-0ubuntu0.1+esm10","7:3.4.11-0ubuntu0.1+esm11","7:3.4.11-0ubuntu0.1+esm12","7:3.4.11-0ubuntu0.1+esm13","7:3.4.11-0ubuntu0.1+esm14","7:3.4.11-0ubuntu0.1+esm15","7:3.4.11-0ubuntu0.1+esm16"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7:4.1.4-1build2","7:4.2.1-2","7:4.2.1-2ubuntu1","7:4.2.2-1build1","7:4.2.2-1ubuntu1","7:4.2.4-1ubuntu0.1","7:4.2.4-1ubuntu0.1+esm1","7:4.2.7-0ubuntu0.1","7:4.2.7-0ubuntu0.1+esm1","7:4.2.7-0ubuntu0.1+esm2","7:4.2.7-0ubuntu0.1+esm3","7:4.2.7-0ubuntu0.1+esm4","7:4.2.7-0ubuntu0.1+esm5","7:4.2.7-0ubuntu0.1+esm6","7:4.2.7-0ubuntu0.1+esm7","7:4.2.7-0ubuntu0.1+esm8","7:4.2.7-0ubuntu0.1+esm9","7:4.2.7-0ubuntu0.1+esm10","7:4.2.7-0ubuntu0.1+esm11","7:4.2.7-0ubuntu0.1+esm12","7:4.2.7-0ubuntu0.1+esm13","7:4.2.7-0ubuntu0.1+esm14","7:4.2.7-0ubuntu0.1+esm15","7:4.2.7-0ubuntu0.1+esm16","7:4.2.7-0ubuntu0.1+esm17","7:4.2.7-0ubuntu0.1+esm18"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7:4.4-6ubuntu5","7:4.4.1-2ubuntu1","7:4.4.1-3ubuntu1","7:4.4.1-3ubuntu2","7:4.4.1-3ubuntu3","7:4.4.1-3ubuntu5","7:4.4.2-0ubuntu0.22.04.1","7:4.4.2-0ubuntu0.22.04.1+esm1","7:4.4.2-0ubuntu0.22.04.1+esm2","7:4.4.2-0ubuntu0.22.04.1+esm3","7:4.4.2-0ubuntu0.22.04.1+esm4","7:4.4.2-0ubuntu0.22.04.1+esm5","7:4.4.2-0ubuntu0.22.04.1+esm6","7:4.4.2-0ubuntu0.22.04.1+esm7","7:4.4.2-0ubuntu0.22.04.1+esm8","7:4.4.2-0ubuntu0.22.04.1+esm9","7:4.4.2-0ubuntu0.22.04.1+esm10","7:4.4.2-0ubuntu0.22.04.1+esm11","7:4.4.2-0ubuntu0.22.04.1+esm12","7:4.4.2-0ubuntu0.22.04.1+esm13","7:4.4.2-0ubuntu0.22.04.1+esm14","7:4.4.2-0ubuntu0.22.04.1+esm15","7:4.4.2-0ubuntu0.22.04.1+esm16","7:4.4.2-0ubuntu0.22.04.1+esm17"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7:6.0-6ubuntu1","7:6.0-9ubuntu1","7:6.1-2ubuntu1","7:6.1-3ubuntu1","7:6.1-4ubuntu1","7:6.1-5ubuntu1","7:6.1.1-1ubuntu1","7:6.1.1-3ubuntu1","7:6.1.1-3ubuntu5","7:6.1.1-3ubuntu5+esm1","7:6.1.1-3ubuntu5+esm2","7:6.1.1-3ubuntu5+esm3","7:6.1.1-3ubuntu5+esm4","7:6.1.1-3ubuntu5+esm5","7:6.1.1-3ubuntu5+esm6","7:6.1.1-3ubuntu5+esm7","7:6.1.1-3ubuntu5+esm8","7:6.1.1-3ubuntu5+esm10","7:6.1.1-3ubuntu5+esm11","7:6.1.1-3ubuntu5+esm12","7:6.1.1-3ubuntu5+esm13","7:6.1.1-3ubuntu5+esm15"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7:7.1.1-1ubuntu1","7:7.1.1-1ubuntu2","7:7.1.1-1ubuntu3","7:7.1.1-1ubuntu4","7:7.1.1-1ubuntu4.1","7:7.1.1-1ubuntu4.2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7:8.0.1-3ubuntu2","7:8.1-3ubuntu3","7:8.1.2-2ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:26.04:LTS","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7:7.1.1-1ubuntu4","7:7.1.2-1ubuntu3","7:7.1.2-1ubuntu4","7:7.1.3-1ubuntu1","7:8.0.1-2ubuntu1","7:8.0.1-3ubuntu1","7:8.0.1-3ubuntu2","7:8.0.1-3ubuntu2+esm1","7:8.0.1-3ubuntu2+esm3","7:8.0.1-3ubuntu2+esm4","7:8.0.1-3ubuntu2+esm5"]}],"products":[{"vendor":"ffmpeg","product":"ffmpeg"},{"vendor":"libav","product":"libav"}],"references":[{"url":"http://www.osvdb.org/111725","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.securityfocus.com/bid/69250","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=52b81ff4635c077b2bc8b8d3637d933b6629d803","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://security.gentoo.org/glsa/201603-06","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"https://www.ffmpeg.org/security.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-5271"},{"url":"http://git.videolan.org/?p=ffmpeg.git;a=commit;h=52b81ff4635c077b2bc8b8d3637d933b6629d803"},{"url":"https://github.com/advisories/GHSA-qmmw-8mm8-4p5g"},{"url":"https://advisories.mageia.org/MGASA-2014-0464.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=14042","tags":["report"]},{"url":"http://git.videolan.org/?p=ffmpeg.git;a=log;h=n2.0.6","tags":["web"]},{"url":"http://ffmpeg.org/olddownload.html","tags":["web"]},{"url":"http://ffmpeg.org/security.html","tags":["web"]},{"url":"http://openwall.com/lists/oss-security/2014/08/16/6","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2014-0473.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=14556","tags":["report"]},{"url":"http://git.videolan.org/?p=ffmpeg.git;a=log;h=n1.1.14","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2014-0491.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=14562","tags":["report"]},{"url":"http://ffmpeg.org/download.html","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2014-5271","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-5271","tags":["report"]},{"url":"https://git.videolan.org/?p=ffmpeg.git;a=commit;h=52b81ff4635c077b2bc8b8d3637d933b6629d803","tags":["report"]},{"url":"https://git.libav.org/?p=libav.git;a=commitdiff;h=45ce880a9b3e50cfa088f111dffaf8685bd7bc6b","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2014-5271","description":"Heap-based buffer overflow in the encode_slice function in libavcodec/proresenc_kostya.c in FFMpeg before 1.1.14, 1.2.x before 1.2.8, 2.x before 2.2.7, and 2.3.x before 2.3.3 and Libav before 10.5 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors.","status":"published","published":"2014-11-03T16:00:00Z","modified":"2024-08-06T11:41:47.864Z","updated_at":"2026-11-02T14:33:41.889751Z"}],"euvd":[{"id":"EUVD-2014-5164","description":"Heap-based buffer overflow in the encode_slice function in libavcodec/proresenc_kostya.c in FFMpeg before 1.1.14, 1.2.x before 1.2.8, 2.x before 2.2.7, and 2.3.x before 2.3.3 and Libav before 10.5 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors.","status":"published","published":"2014-11-03T16:00:00Z","modified":"2024-08-06T11:41:47Z","updated_at":"2026-11-03T01:57:03.789124Z"}],"ghsa":[{"id":"GHSA-qmmw-8mm8-4p5g","title":"Heap-based buffer overflow in the encode_slice function in libavcodec/proresenc_kostya.c in...","description":"Heap-based buffer overflow in the encode_slice function in libavcodec/proresenc_kostya.c in FFMpeg before 1.1.14, 1.2.x before 1.2.8, 2.x before 2.2.7, and 2.3.x before 2.3.3 and Libav before 10.5 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors.","status":"published","published":"2022-05-17T03:34:41Z","modified":"2025-04-12T12:42:31Z","cwes":["CWE-119"],"updated_at":"2026-11-02T15:01:19.407948Z"}],"nvd":[{"id":"CVE-2014-5271","description":"Heap-based buffer overflow in the encode_slice function in libavcodec/proresenc_kostya.c in FFMpeg before 1.1.14, 1.2.x before 1.2.8, 2.x before 2.2.7, and 2.3.x before 2.3.3 and Libav before 10.5 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors.","status":"published","published":"2014-11-03T16:55:05.573Z","modified":"2026-06-17T00:11:18.723Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:02:56.921017Z"}],"osv":[{"id":"MGASA-2014-0464","title":"Updated ffmpeg packages fix security vulnerabilities","description":"A heap-based buffer overflow in the encode_slice function in\nlibavcodec/proresenc_kostya.c in FFmpeg before 2.0.6 can cause a crash,\nallowing a malicious image file to cause a denial of service (CVE-2014-5271).\n\nlibavcodec/iff.c in FFmpeg before 2.0.6 allows an attacker to have an\nunspecified impact via a crafted iff image, which triggers an out-of-bounds\narray access, related to the rgb8 and rgbn formats (CVE-2014-5272).\n\nlibavcodec/mjpegdec.c in FFmpeg before 2.0.6 considers only dimension\ndifferences, and not bits-per-pixel differences, when determining whether an\nimage size has changed, which allows remote attackers to cause a denial of\nservice (out-of-bounds access) or possibly have unspecified other impact via\ncrafted MJPEG data (CVE-2014-8541).\n\nlibavcodec/utils.c in FFmpeg before 2.0.6 omits a certain codec ID during\nenforcement of alignment, which allows remote attackers to cause a denial of\nservice (out-of-bounds access) or possibly have unspecified other impact via\ncrafted JV data (CVE-2014-8542).\n\nlibavcodec/mmvideo.c in FFmpeg before 2.0.6 does not consider all lines of\nHHV Intra blocks during validation of image height, which allows remote\nattackers to cause a denial of service (out-of-bounds access) or possibly\nhave unspecified other impact via crafted MM video data (CVE-2014-8543).\n\nlibavcodec/tiff.c in FFmpeg before 2.0.6 does not properly validate\nbits-per-pixel fields, which allows remote attackers to cause a denial of\nservice (out-of-bounds access) or possibly have unspecified other impact via\ncrafted TIFF data (CVE-2014-8544).\n\nlibavcodec/pngdec.c in FFmpeg before 2.0.6 accepts the monochrome-black\nformat without verifying that the bits-per-pixel value is 1, which allows\nremote attackers to cause a denial of service (out-of-bounds access) or\npossibly have unspecified other impact via crafted PNG data (CVE-2014-8545).\n\nInteger underflow in libavcodec/cinepak.c in FFmpeg before 2.0.6 allows\nremote attackers to cause a denial of service (out-of-bounds access) or\npossibly have unspecified other impact via crafted Cinepak video data\n(CVE-2014-8546).\n\nlibavcodec/gifdec.c in FFmpeg before 2.0.6 does not properly compute image\nheights, which allows remote attackers to cause a denial of service\n(out-of-bounds access) or possibly have unspecified other impact via crafted\nGIF data (CVE-2014-8547).\n\nOff-by-one error in libavcodec/smc.c in FFmpeg before 2.0.6 allows remote\nattackers to cause a denial of service (out-of-bounds access) or possibly\nhave unspecified other impact via crafted Quicktime Graphics (aka SMC) video\ndata (CVE-2014-8548).\n","status":"published","published":"2014-11-21T12:44:16Z","modified":"2026-04-16T06:24:24.311355658Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"MGASA-2014-0473","title":"Updated ffmpeg packages fix security vulnerabilities","description":"A heap-based buffer overflow in the encode_slice function in\nlibavcodec/proresenc_kostya.c in FFmpeg before 1.1.14 can cause a crash,\nallowing a malicious image file to cause a denial of service (CVE-2014-5271).\n\nlibavcodec/iff.c in FFmpeg before 1.1.14 allows an attacker to have an\nunspecified impact via a crafted iff image, which triggers an out-of-bounds\narray access, related to the rgb8 and rgbn formats (CVE-2014-5272).\n","status":"published","published":"2014-11-21T12:44:16Z","modified":"2026-04-16T06:26:14.503750475Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"MGASA-2014-0491","title":"Updated avidemux packages fix security vulnerabilities","description":"A heap-based buffer overflow in the encode_slice function in\nlibavcodec/proresenc_kostya.c in FFmpeg before 1.2.9 can cause a crash,\nallowing a malicious image file to cause a denial of service (CVE-2014-5271).\n\nlibavcodec/iff.c in FFmpeg before 1.2.9 allows an attacker to have an\nunspecified impact via a crafted iff image, which triggers an out-of-bounds\narray access, related to the rgb8 and rgbn formats (CVE-2014-5272).\n\nlibavcodec/mjpegdec.c in FFmpeg before 1.2.9 considers only dimension\ndifferences, and not bits-per-pixel differences, when determining whether an\nimage size has changed, which allows remote attackers to cause a denial of\nservice (out-of-bounds access) or possibly have unspecified other impact via\ncrafted MJPEG data (CVE-2014-8541).\n\nlibavcodec/utils.c in FFmpeg before 1.2.9 omits a certain codec ID during\nenforcement of alignment, which allows remote attackers to cause a denial of\nservice (out-of-bounds access) or possibly have unspecified other impact via\ncrafted JV data (CVE-2014-8542).\n\nlibavcodec/mmvideo.c in FFmpeg before 1.2.9 does not consider all lines of\nHHV Intra blocks during validation of image height, which allows remote\nattackers to cause a denial of service (out-of-bounds access) or possibly\nhave unspecified other impact via crafted MM video data (CVE-2014-8543).\n\nlibavcodec/tiff.c in FFmpeg before 1.2.9 does not properly validate\nbits-per-pixel fields, which allows remote attackers to cause a denial of\nservice (out-of-bounds access) or possibly have unspecified other impact via\ncrafted TIFF data (CVE-2014-8544).\n\nlibavcodec/pngdec.c in FFmpeg before 1.2.9 accepts the monochrome-black\nformat without verifying that the bits-per-pixel value is 1, which allows\nremote attackers to cause a denial of service (out-of-bounds access) or\npossibly have unspecified other impact via crafted PNG data (CVE-2014-8545).\n\nInteger underflow in libavcodec/cinepak.c in FFmpeg before 1.2.9 allows\nremote attackers to cause a denial of service (out-of-bounds access) or\npossibly have unspecified other impact via crafted Cinepak video data\n(CVE-2014-8546).\n\nlibavcodec/gifdec.c in FFmpeg before 1.2.9 does not properly compute image\nheights, which allows remote attackers to cause a denial of service\n(out-of-bounds access) or possibly have unspecified other impact via crafted\nGIF data (CVE-2014-8547).\n\nOff-by-one error in libavcodec/smc.c in FFmpeg before 1.2.9 allows remote\nattackers to cause a denial of service (out-of-bounds access) or possibly\nhave unspecified other impact via crafted Quicktime Graphics (aka SMC) video\ndata (CVE-2014-8548).\n\nAvidemux built with a bundled set of FFmpeg libraries.  The bundled FFmpeg\nversion have been updated from 1.2.7 to 1.2.10 to fix these security issues\nand other bugs fixed upstream in FFmpeg.\n","status":"published","published":"2014-11-26T17:29:06Z","modified":"2026-04-16T06:25:18.637222653Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"UBUNTU-CVE-2014-5271","description":"Heap-based buffer overflow in the encode_slice function in libavcodec/proresenc_kostya.c in FFMpeg before 1.1.14, 1.2.x before 1.2.8, 2.x before 2.2.7, and 2.3.x before 2.3.3 and Libav before 10.5 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors.","status":"published","published":"2014-11-03T16:55:00Z","modified":"2026-10-17T12:52:40.082094234Z","updated_at":"2026-11-02T15:54:09.010095Z"}]}}