CVE-2014-9316

CVE-2014-9316 describes an out-of-bounds heap access vulnerability in the mjpeg_decode_app function within FFMpeg versions before 2.1.6, 2.2.x through 2.3.x, and 2.4.x before 2.4.4. This flaw, triggered by specially crafted LJIF tags in an MJPEG file, allows remote attackers to cause a denial of service and potentially other unspecified impacts. With a CVSS score of 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P), it is considered highly severe, indicating a network-based attack with low complexity that can lead to partial confidentiality, integrity, and availability compromise. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, suggesting it is not a widely targeted vulnerability.