{"id":"CVE-2014-8544","aliases":["DEBIAN-CVE-2014-8544","DSA-3189-1","EUVD-2014-8381","GHSA-3f4q-ffp5-3396","MGASA-2014-0464","MGASA-2014-0491","UBUNTU-CVE-2014-8544","openSUSE-SU-2024:10926-1"],"status":"published","title":"libavcodec/tiff.c in FFmpeg before 2.4.2 does not properly validate bits-per-pixel fields, which...","description":"libavcodec/tiff.c in FFmpeg before 2.4.2 does not properly validate bits-per-pixel fields, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted TIFF data.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.03143,"percentile":0.87994,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2014-11-05T00:00:00Z","modified":"2026-10-23T15:47:38Z","fixes":[{"ecosystem":"Debian:12","package":"ffmpeg","fixed_in":["7:2.4.3-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"ffmpeg","fixed_in":["7:2.4.3-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"ffmpeg","fixed_in":["7:2.4.3-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"libav","fixed_in":["6:9.18-0ubuntu0.14.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:2.4.3-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:2.4.3-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:2.4.3-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"libav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:0.8.17-1"}]}],"versions":["6:0.8.10-1","6:0.8.12-1","6:0.8.13-1","6:0.8.15-1","6:0.8.16-1","6:0.8.6-1","6:0.8.7-1","6:0.8.8-1","6:0.8.9-1"],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-1.mga4"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:4","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-1.mga4.tainted"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:4","package":"avidemux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-2.2.mga4"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:4","package":"avidemux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-2.2.mga4.tainted"}]}],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:9.18-0ubuntu0.14.04.1"}]}],"versions":["6:0.8.7-1ubuntu2","6:9.10-1ubuntu1","6:9.10-1ubuntu2","6:9.10-1ubuntu5","6:9.10-1ubuntu6","6:9.10-1ubuntu7","6:9.11-2ubuntu1","6:9.11-2ubuntu2","6:9.13-0ubuntu0.14.04.1","6:9.14-0ubuntu0.14.04.1","6:9.16-0ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libav-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3-1.17"}]}],"bundled":12}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"ffmpeg","product":"ffmpeg"}],"references":[{"url":"http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=e1c0cfaa419aa5d320540d5a1b3f8fd9b82ab7e5","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/USN-2534-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.ffmpeg.org/security.html","tags":["x_refsource_CONFIRM","x_transferred","web","report"]},{"url":"https://security.gentoo.org/glsa/201603-06","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8544"},{"url":"http://git.videolan.org/?p=ffmpeg.git;a=commit;h=e1c0cfaa419aa5d320540d5a1b3f8fd9b82ab7e5","tags":["report"]},{"url":"https://github.com/advisories/GHSA-3f4q-ffp5-3396"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-8544","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2014-0464.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=14042","tags":["report"]},{"url":"http://git.videolan.org/?p=ffmpeg.git;a=log;h=n2.0.6","tags":["web"]},{"url":"http://ffmpeg.org/olddownload.html","tags":["web"]},{"url":"http://ffmpeg.org/security.html","tags":["web"]},{"url":"http://openwall.com/lists/oss-security/2014/08/16/6","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2014-0491.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=14562","tags":["report"]},{"url":"http://ffmpeg.org/download.html","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2014-8544","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2534-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8544","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-6618","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5479","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3062","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2014-8544","description":"libavcodec/tiff.c in FFmpeg before 2.4.2 does not properly validate bits-per-pixel fields, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted TIFF data.","status":"published","published":"2014-11-05T11:00:00Z","modified":"2024-08-06T13:18:48.642Z","updated_at":"2026-11-02T14:33:43.566796Z"}],"euvd":[{"id":"EUVD-2014-8381","description":"libavcodec/tiff.c in FFmpeg before 2.4.2 does not properly validate bits-per-pixel fields, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted TIFF data.","status":"published","published":"2014-11-05T11:00:00Z","modified":"2024-08-06T13:18:48Z","updated_at":"2026-11-03T01:56:51.537817Z"}],"ghsa":[{"id":"GHSA-3f4q-ffp5-3396","title":"libavcodec/tiff.c in FFmpeg before 2.4.2 does not properly validate bits-per-pixel fields, which...","description":"libavcodec/tiff.c in FFmpeg before 2.4.2 does not properly validate bits-per-pixel fields, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted TIFF data.","status":"published","published":"2022-05-17T03:34:39Z","modified":"2025-04-12T12:42:41Z","cwes":["CWE-20"],"updated_at":"2026-11-02T15:01:19.407948Z"}],"nvd":[{"id":"CVE-2014-8544","description":"libavcodec/tiff.c in FFmpeg before 2.4.2 does not properly validate bits-per-pixel fields, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted TIFF data.","status":"published","published":"2014-11-05T11:55:07.983Z","modified":"2026-06-17T00:16:54.55Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:02:57.304171Z"}],"osv":[{"id":"CVE-2014-8544","description":"libavcodec/tiff.c in FFmpeg before 2.4.2 does not properly validate bits-per-pixel fields, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted TIFF data.","status":"published","published":"2014-11-05T11:55:07Z","modified":"2026-04-16T06:19:49.213246173Z","updated_at":"2026-11-02T15:44:00.097545Z"},{"id":"DEBIAN-CVE-2014-8544","description":"libavcodec/tiff.c in FFmpeg before 2.4.2 does not properly validate bits-per-pixel fields, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted TIFF data.","status":"published","published":"2014-11-05T11:55:07.983Z","modified":"2026-10-23T15:47:38.677591641Z","updated_at":"2026-11-02T15:45:26.442161Z"},{"id":"DSA-3189-1","title":"libav - security update","status":"published","published":"2015-03-15T00:00:00Z","modified":"2026-03-09T01:19:12.555028Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"MGASA-2014-0464","title":"Updated ffmpeg packages fix security vulnerabilities","description":"A heap-based buffer overflow in the encode_slice function in\nlibavcodec/proresenc_kostya.c in FFmpeg before 2.0.6 can cause a crash,\nallowing a malicious image file to cause a denial of service (CVE-2014-5271).\n\nlibavcodec/iff.c in FFmpeg before 2.0.6 allows an attacker to have an\nunspecified impact via a crafted iff image, which triggers an out-of-bounds\narray access, related to the rgb8 and rgbn formats (CVE-2014-5272).\n\nlibavcodec/mjpegdec.c in FFmpeg before 2.0.6 considers only dimension\ndifferences, and not bits-per-pixel differences, when determining whether an\nimage size has changed, which allows remote attackers to cause a denial of\nservice (out-of-bounds access) or possibly have unspecified other impact via\ncrafted MJPEG data (CVE-2014-8541).\n\nlibavcodec/utils.c in FFmpeg before 2.0.6 omits a certain codec ID during\nenforcement of alignment, which allows remote attackers to cause a denial of\nservice (out-of-bounds access) or possibly have unspecified other impact via\ncrafted JV data (CVE-2014-8542).\n\nlibavcodec/mmvideo.c in FFmpeg before 2.0.6 does not consider all lines of\nHHV Intra blocks during validation of image height, which allows remote\nattackers to cause a denial of service (out-of-bounds access) or possibly\nhave unspecified other impact via crafted MM video data (CVE-2014-8543).\n\nlibavcodec/tiff.c in FFmpeg before 2.0.6 does not properly validate\nbits-per-pixel fields, which allows remote attackers to cause a denial of\nservice (out-of-bounds access) or possibly have unspecified other impact via\ncrafted TIFF data (CVE-2014-8544).\n\nlibavcodec/pngdec.c in FFmpeg before 2.0.6 accepts the monochrome-black\nformat without verifying that the bits-per-pixel value is 1, which allows\nremote attackers to cause a denial of service (out-of-bounds access) or\npossibly have unspecified other impact via crafted PNG data (CVE-2014-8545).\n\nInteger underflow in libavcodec/cinepak.c in FFmpeg before 2.0.6 allows\nremote attackers to cause a denial of service (out-of-bounds access) or\npossibly have unspecified other impact via crafted Cinepak video data\n(CVE-2014-8546).\n\nlibavcodec/gifdec.c in FFmpeg before 2.0.6 does not properly compute image\nheights, which allows remote attackers to cause a denial of service\n(out-of-bounds access) or possibly have unspecified other impact via crafted\nGIF data (CVE-2014-8547).\n\nOff-by-one error in libavcodec/smc.c in FFmpeg before 2.0.6 allows remote\nattackers to cause a denial of service (out-of-bounds access) or possibly\nhave unspecified other impact via crafted Quicktime Graphics (aka SMC) video\ndata (CVE-2014-8548).\n","status":"published","published":"2014-11-21T12:44:16Z","modified":"2026-04-16T06:24:24.311355658Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"MGASA-2014-0491","title":"Updated avidemux packages fix security vulnerabilities","description":"A heap-based buffer overflow in the encode_slice function in\nlibavcodec/proresenc_kostya.c in FFmpeg before 1.2.9 can cause a crash,\nallowing a malicious image file to cause a denial of service (CVE-2014-5271).\n\nlibavcodec/iff.c in FFmpeg before 1.2.9 allows an attacker to have an\nunspecified impact via a crafted iff image, which triggers an out-of-bounds\narray access, related to the rgb8 and rgbn formats (CVE-2014-5272).\n\nlibavcodec/mjpegdec.c in FFmpeg before 1.2.9 considers only dimension\ndifferences, and not bits-per-pixel differences, when determining whether an\nimage size has changed, which allows remote attackers to cause a denial of\nservice (out-of-bounds access) or possibly have unspecified other impact via\ncrafted MJPEG data (CVE-2014-8541).\n\nlibavcodec/utils.c in FFmpeg before 1.2.9 omits a certain codec ID during\nenforcement of alignment, which allows remote attackers to cause a denial of\nservice (out-of-bounds access) or possibly have unspecified other impact via\ncrafted JV data (CVE-2014-8542).\n\nlibavcodec/mmvideo.c in FFmpeg before 1.2.9 does not consider all lines of\nHHV Intra blocks during validation of image height, which allows remote\nattackers to cause a denial of service (out-of-bounds access) or possibly\nhave unspecified other impact via crafted MM video data (CVE-2014-8543).\n\nlibavcodec/tiff.c in FFmpeg before 1.2.9 does not properly validate\nbits-per-pixel fields, which allows remote attackers to cause a denial of\nservice (out-of-bounds access) or possibly have unspecified other impact via\ncrafted TIFF data (CVE-2014-8544).\n\nlibavcodec/pngdec.c in FFmpeg before 1.2.9 accepts the monochrome-black\nformat without verifying that the bits-per-pixel value is 1, which allows\nremote attackers to cause a denial of service (out-of-bounds access) or\npossibly have unspecified other impact via crafted PNG data (CVE-2014-8545).\n\nInteger underflow in libavcodec/cinepak.c in FFmpeg before 1.2.9 allows\nremote attackers to cause a denial of service (out-of-bounds access) or\npossibly have unspecified other impact via crafted Cinepak video data\n(CVE-2014-8546).\n\nlibavcodec/gifdec.c in FFmpeg before 1.2.9 does not properly compute image\nheights, which allows remote attackers to cause a denial of service\n(out-of-bounds access) or possibly have unspecified other impact via crafted\nGIF data (CVE-2014-8547).\n\nOff-by-one error in libavcodec/smc.c in FFmpeg before 1.2.9 allows remote\nattackers to cause a denial of service (out-of-bounds access) or possibly\nhave unspecified other impact via crafted Quicktime Graphics (aka SMC) video\ndata (CVE-2014-8548).\n\nAvidemux built with a bundled set of FFmpeg libraries.  The bundled FFmpeg\nversion have been updated from 1.2.7 to 1.2.10 to fix these security issues\nand other bugs fixed upstream in FFmpeg.\n","status":"published","published":"2014-11-26T17:29:06Z","modified":"2026-04-16T06:25:18.637222653Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"openSUSE-SU-2024:10926-1","title":"libav-tools-12.3-1.17 on GA media","description":"These are all security issues fixed in the libav-tools-12.3-1.17 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:10:03.438996Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"UBUNTU-CVE-2014-8544","description":"libavcodec/tiff.c in FFmpeg before 2.4.2 does not properly validate bits-per-pixel fields, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted TIFF data.","status":"published","published":"2014-11-05T00:00:00Z","modified":"2026-04-22T09:52:56.731231Z","updated_at":"2026-11-02T15:54:09.378953Z"}]}}