Unrated severityNVD Advisory· Published Apr 24, 2015· Updated Jun 17, 2026

CVE-2015-3417

Description

Use-after-free vulnerability in the ff_h264_free_tables function in libavcodec/h264.c in FFmpeg before 2.3.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted H.264 data in an MP4 file, as demonstrated by an HTML VIDEO element that references H.264 data.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

FFmpeg/Ffmpeg2 versions
cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*range: <=2.3.5
- (no CPE)range: <2.3.6
Debian/linux
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
osv-coords
pkg:rpm/opensuse/libav-tools&distro=openSUSE%20Tumbleweed
Range: < 12.3-1.17

Patches

Vulnerability mechanics

References

github.com/FFmpeg/FFmpeg/commit/e8714f6f93d1a32f4e4655209960afcf4c185214nvdPatchVendor Advisory
seclists.org/fulldisclosure/2015/Apr/31nvdThird Party AdvisoryVDB Entry
www.debian.org/security/2015/dsa-3288nvdThird Party Advisory
www.securityfocus.com/bid/74385nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1032198nvdThird Party AdvisoryVDB Entry
git.libav.orgnvd
security.gentoo.org/glsa/201705-08nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000