Numeric Errors The advisory has been revoked - it doesn't affect any version of package ffmpeg  (opens in a new tab)


Threat Intelligence

EPSS
2.4% (82nd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-COCOAPODS-FFMPEG-470775
  • published2 Oct 2019
  • disclosed17 Dec 2014
  • creditUnknown

Introduced: 17 Dec 2014

CVE-2014-9604  (opens in a new tab)
CWE-189  (opens in a new tab)

Amendment

This was deemed not a vulnerability.

Overview

FFmpeg is a FFmpeg static library ruby binding that is compiled for iOS and CocoaPods.

Affected versions of this package are vulnerable to Numeric Errors because FFmpeg does not check for a zero value of a slice height in utvideodec.c.