CVE-2014-8002

High

Published: 25/11/2014(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

Use-after-free vulnerability in decode_slice.cpp in Cisco OpenH264 1.2.0 and earlier allows remote attackers to execute arbitrary code via an encoded media file.

Risk Assessment

An attacker can exploit this vulnerability to remotely execute malicious code, potentially leading to system compromise.

Recommendation

It is recommended to update to the latest version of Cisco OpenH264 to mitigate this vulnerability.

Other vulnerabilities in Cisco OpenH264

CVE-2014-8001High
Buffer overflow in decode.cpp in Cisco OpenH264 1.2.0 and earlier allows remote attackers to execute arbitrary code via an encoded media file.

Original NVD description (English source)

Use-after-free vulnerability in decode_slice.cpp in Cisco OpenH264 1.2.0 and earlier allows remote attackers to execute arbitrary code via an encoded media file.