CVE
- Id
- 85494
- CVE No.
- CVE-2015-8217
- Status
- Candidate
- Description
- The ff_hevc_parse_sps function in libavcodec/hevc_ps.c in FFmpeg before 2.8.2 does not validate the Chroma Format Indicator, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted High Efficiency Video Coding (HEVC) data.
- Phase
- Assigned (20151116)
- Votes
- None (candidate not yet proposed)
- Comments