VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 16, 2015· Updated Jun 17, 2026

CVE-2015-3395

CVE-2015-3395

Description

The msrle_decode_pal4 function in msrledec.c in Libav before 10.7 and 11.x before 11.4 and FFmpeg before 2.0.7, 2.2.x before 2.2.15, 2.4.x before 2.4.8, 2.5.x before 2.5.6, and 2.6.x before 2.6.2 allows remote attackers to have unspecified impact via a crafted image, related to a pixel pointer, which triggers an out-of-bounds array access.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

41
  • FFmpeg/Ffmpeg33 versions
    cpe:2.3:a:ffmpeg:ffmpeg:2.0.6:*:*:*:*:*:*:*+ 32 more
    • cpe:2.3:a:ffmpeg:ffmpeg:2.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:2.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:2.2.10:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:2.2.11:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:2.2.12:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:2.2.13:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:2.2.14:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:2.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:2.2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:2.2.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:2.2.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:2.2.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:2.2.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:2.2.7:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:2.2.8:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:2.2.9:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:2.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:2.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:2.4.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:2.4.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:2.4.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:2.4.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:2.4.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:2.4.7:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:2.5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:2.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:2.5.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:2.5.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:2.5.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:2.5.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:2.6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:2.6.1:*:*:*:*:*:*:*
    • (no CPE)range: <2.0.7, >=2.2.0 <2.2.15, >=2.4.0 <2.4.8, >=2.5.0 <2.5.6, >=2.6.0 <2.6.2
  • Libav/Libav6 versions
    cpe:2.3:a:libav:libav:*:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:libav:libav:*:*:*:*:*:*:*:*range: <=10.6
    • cpe:2.3:a:libav:libav:11.0:*:*:*:*:*:*:*
    • cpe:2.3:a:libav:libav:11.1:*:*:*:*:*:*:*
    • cpe:2.3:a:libav:libav:11.2:*:*:*:*:*:*:*
    • cpe:2.3:a:libav:libav:11.3:*:*:*:*:*:*:*
    • (no CPE)range: <10.7, >=11.0 <=11.4
  • Canonical/Ubuntu Linux
    cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
  • osv-coords
    pkg:rpm/opensuse/libav-tools&distro=openSUSE%20Tumbleweed
    Range: < 12.3-1.17

Patches

Vulnerability mechanics

References

8

News mentions

0

No linked articles in our index yet.