CVE-2014-8547

high

Published 2014-11-05 · Modified 2026-05-06

CVSS v3

—

VIR risk

7.5

Description

libavcodec/gifdec.c in FFmpeg before 2.4.2 does not properly compute image heights, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted GIF data.

Predictions

Exploit likelihood

20%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

OS impact

OS	Version	Status	Fixed in
debian	bookworm	fixed	`7:2.4.3-1`
debian	bullseye	fixed	`7:2.4.3-1`
debian	forky	fixed	`7:2.4.3-1`
debian	sid	fixed	`7:2.4.3-1`
debian	trixie	fixed	`7:2.4.3-1`
ubuntu	12.04	affected

Application impact

Vendor	Product	Versions
ffmpeg	ffmpeg	`{"endIncluding":"2.4.1"}`
ffmpeg	ffmpeg	`0.3`
ffmpeg	ffmpeg	`0.3.1`
ffmpeg	ffmpeg	`0.3.2`
ffmpeg	ffmpeg	`0.3.3`
ffmpeg	ffmpeg	`0.3.4`
ffmpeg	ffmpeg	`0.4.0`
ffmpeg	ffmpeg	`0.4.2`
ffmpeg	ffmpeg	`0.4.3`
ffmpeg	ffmpeg	`0.4.4`
ffmpeg	ffmpeg	`0.4.5`
ffmpeg	ffmpeg	`0.4.6`
ffmpeg	ffmpeg	`0.4.7`
ffmpeg	ffmpeg	`0.4.8`
ffmpeg	ffmpeg	`0.4.9`
ffmpeg	ffmpeg	`0.5`
ffmpeg	ffmpeg	`0.5.1`
ffmpeg	ffmpeg	`0.5.2`
ffmpeg	ffmpeg	`0.5.3`
ffmpeg	ffmpeg	`0.5.4`
ffmpeg	ffmpeg	`0.5.4.5`
ffmpeg	ffmpeg	`0.5.4.6`
ffmpeg	ffmpeg	`0.5.5`
ffmpeg	ffmpeg	`0.6`
ffmpeg	ffmpeg	`0.6.1`
ffmpeg	ffmpeg	`0.6.2`
ffmpeg	ffmpeg	`0.6.3`
ffmpeg	ffmpeg	`0.7`
ffmpeg	ffmpeg	`0.7.1`
ffmpeg	ffmpeg	`0.7.2`
ffmpeg	ffmpeg	`0.7.3`
ffmpeg	ffmpeg	`0.7.4`
ffmpeg	ffmpeg	`0.7.5`
ffmpeg	ffmpeg	`0.7.6`
ffmpeg	ffmpeg	`0.7.7`
ffmpeg	ffmpeg	`0.7.8`
ffmpeg	ffmpeg	`0.7.9`
ffmpeg	ffmpeg	`0.7.11`
ffmpeg	ffmpeg	`0.7.12`
ffmpeg	ffmpeg	`0.8.0`
ffmpeg	ffmpeg	`0.8.1`
ffmpeg	ffmpeg	`0.8.2`
ffmpeg	ffmpeg	`0.8.5`
ffmpeg	ffmpeg	`0.8.5.3`
ffmpeg	ffmpeg	`0.8.5.4`
ffmpeg	ffmpeg	`0.8.6`
ffmpeg	ffmpeg	`0.8.7`
ffmpeg	ffmpeg	`0.8.8`
ffmpeg	ffmpeg	`0.8.10`
ffmpeg	ffmpeg	`0.8.11`
ffmpeg	ffmpeg	`0.9`
ffmpeg	ffmpeg	`0.9.1`
ffmpeg	ffmpeg	`0.10`
ffmpeg	ffmpeg	`0.10.3`
ffmpeg	ffmpeg	`0.10.4`
ffmpeg	ffmpeg	`0.11`
ffmpeg	ffmpeg	`0.11.1`
ffmpeg	ffmpeg	`0.11.2`
ffmpeg	ffmpeg	`0.11.3`
ffmpeg	ffmpeg	`0.11.4`
ffmpeg	ffmpeg	`1.0`
ffmpeg	ffmpeg	`1.0.1`
ffmpeg	ffmpeg	`1.0.2`
ffmpeg	ffmpeg	`1.0.3`
ffmpeg	ffmpeg	`1.0.4`
ffmpeg	ffmpeg	`1.1`
ffmpeg	ffmpeg	`1.1.1`
ffmpeg	ffmpeg	`1.1.2`
ffmpeg	ffmpeg	`1.1.3`
ffmpeg	ffmpeg	`1.1.4`
ffmpeg	ffmpeg	`1.1.5`
ffmpeg	ffmpeg	`1.1.6`
ffmpeg	ffmpeg	`1.1.7`
ffmpeg	ffmpeg	`1.1.8`
ffmpeg	ffmpeg	`1.1.9`
ffmpeg	ffmpeg	`1.1.10`
ffmpeg	ffmpeg	`1.1.11`
ffmpeg	ffmpeg	`1.1.12`
ffmpeg	ffmpeg	`1.1.13`
ffmpeg	ffmpeg	`1.2`
ffmpeg	ffmpeg	`1.2.1`
ffmpeg	ffmpeg	`1.2.3`
ffmpeg	ffmpeg	`1.2.4`
ffmpeg	ffmpeg	`1.2.5`
ffmpeg	ffmpeg	`1.2.6`
ffmpeg	ffmpeg	`1.2.7`
ffmpeg	ffmpeg	`2.0`
ffmpeg	ffmpeg	`2.0.1`
ffmpeg	ffmpeg	`2.0.2`
ffmpeg	ffmpeg	`2.0.3`
ffmpeg	ffmpeg	`2.0.4`
ffmpeg	ffmpeg	`2.0.5`
ffmpeg	ffmpeg	`2.1`
ffmpeg	ffmpeg	`2.1.1`
ffmpeg	ffmpeg	`2.1.2`
ffmpeg	ffmpeg	`2.1.3`
ffmpeg	ffmpeg	`2.1.4`
ffmpeg	ffmpeg	`2.1.5`
ffmpeg	ffmpeg	`2.2`
ffmpeg	ffmpeg	`2.2.4`
ffmpeg	ffmpeg	`2.3`
ffmpeg	ffmpeg	`2.3.2`
ffmpeg	ffmpeg	`2.3.3`
ffmpeg	ffmpeg	`2.3.4`
ffmpeg	ffmpeg	`2.4`

References

CWEs

CWE-119

💬 Discuss CVE-2014-8547 on VIR Community →

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.