CVE-2014-2299

CVE-2014-2299 describes a critical buffer overflow vulnerability in the mpeg_read function of Wireshark's MPEG parser, affecting versions 1.8.x before 1.8.13 and 1.10.x before 1.10.6. This flaw allows remote attackers to execute arbitrary code or cause a denial of service by crafting a large record within MPEG data. With a CVSS score of 9.3, it is highly severe, indicating a network-based attack with medium complexity but full impact on confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, exploit modules are publicly available, including a Metasploit module, though there is no evidence of widespread active exploitation or significant community discussion.