AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2014-9676

MEDIUM · CVSS 6.8 EPSS 3.32%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2015-02-28 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2014-9676
Severity
MEDIUM
CVSS
6.8
EPSS
3.32%

Original NVD Description

The seg_write_packet function in libavformat/segment.c in ffmpeg 2.1.4 and earlier does not free the correct memory location, which allows remote attackers to cause a denial of service ("invalid memory handler") and possibly execute arbitrary code via a crafted video that triggers a use after free.