Patchwire CVEs, their patch status, and feeds to follow them

CVE-2014-5271

No fix known EPSS 5%

Heap-based buffer overflow in the encode_slice function in libavcodec/proresenc_kostya.c in FFMpeg before 1.1.14, 1.2.x before 1.2.8, 2.x before 2.2.7, and 2.3.x before 2.3.3 and Libav before 10.5 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors.

Published 2014-11-03 · CVE record · OSV

Products: ffmpeg, libav

Distro releases

ReleasePackageFixed in
Chainguardtorchaudio-ffmpeg-tarballsno fix
Chainguardtorchaudio-ffmpeg-tarballs-4.4.4no fix
Chainguardtorchaudio-ffmpeg-tarballs-5.0.3no fix
Chainguardtorchaudio-ffmpeg-tarballs-6.0no fix
Ubuntu 25.10ffmpegno fix
Ubuntu 26.10ffmpegno fix
Ubuntu Pro 14.04 LTSlibavno fix
Ubuntu Pro 16.04 LTSffmpegno fix
Ubuntu Pro 18.04 LTSffmpegno fix
Ubuntu Pro 20.04 LTSffmpegno fix
Ubuntu Pro 22.04 LTSffmpegno fix
Ubuntu Pro 24.04 LTSffmpegno fix
Ubuntu Pro 26.04 LTSffmpegno fix