CVE-2013-2495
- Source
- https://cve.org/CVERecord?id=CVE-2013-2495
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2013-2495.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2013-2495
- Downstream
- Published
- 2013-03-09T11:55:01Z
- Modified
- 2026-04-10T03:42:51.196121Z
- Summary
- [none]
- Details
-
The iffreadheader function in iff.c in libavformat in FFmpeg through 1.1.3 does not properly handle data sizes for Interchange File Format (IFF) data during operations involving a CMAP chunk or a video codec, which allows remote attackers to cause a denial of service (integer overflow, out-of-bounds array access, and application crash) or possibly have unspecified other impact via a crafted header.
- References