CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.3. It may be remotely exploitable. It may lead to a denial-of-service condition.
CVE
CVE-2015-8662
Severity
HIGH
CVSS
7.3
EPSS
1.91%
Original NVD Description
The ff_dwt_decode function in libavcodec/jpeg2000dwt.c in FFmpeg before 2.8.4 does not validate the number of decomposition levels before proceeding with Discrete Wavelet Transform decoding, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG 2000 data.