CVE-2014-8542

libavcodec/utils.c in FFmpeg before 2.4.2 omits a certain codec ID during enforcement of alignment, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted JV data.

• CWE-119

• http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=105654e376a736d243aef4a1d121abebce912e6b
• http://www.ffmpeg.org/security.htmlVendor Advisory
• http://www.ubuntu.com/usn/USN-2534-1Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2019/02/msg00005.htmlThird Party Advisory
• https://security.gentoo.org/glsa/201603-06Third Party Advisory
• http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=105654e376a736d243aef4a1d121abebce912e6b
• http://www.ffmpeg.org/security.htmlVendor Advisory
• http://www.ubuntu.com/usn/USN-2534-1Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2019/02/msg00005.htmlThird Party Advisory
• https://security.gentoo.org/glsa/201603-06Third Party Advisory

Published

Nov 5, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-8536McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allo…
• CVE-2014-8537McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allo…
• CVE-2014-8538The Hijab Modern (aka com.Aisyaidea.HijabModern) application…
• CVE-2014-8539Cross-site scripting (XSS) vulnerability in Simple Email For…
• CVE-2014-8540The groups API in GitLab 6.x and 7.x before 7.4.3 allows rem…
• CVE-2014-8541libavcodec/mjpegdec.c in FFmpeg before 2.4.2 considers only …
• CVE-2014-8543libavcodec/mmvideo.c in FFmpeg before 2.4.2 does not conside…
• CVE-2014-8544libavcodec/tiff.c in FFmpeg before 2.4.2 does not properly v…
• CVE-2014-8545libavcodec/pngdec.c in FFmpeg before 2.4.2 accepts the monoc…
• CVE-2014-8546Integer underflow in libavcodec/cinepak.c in FFmpeg before 2…
• CVE-2014-8547libavcodec/gifdec.c in FFmpeg before 2.4.2 does not properly…
• CVE-2014-8548Off-by-one error in libavcodec/smc.c in FFmpeg before 2.4.2 …