CVE-2015-8663

CVE-2015-8663 describes an out-of-bounds array access vulnerability in the ff_get_buffer function within FFmpeg versions prior to 2.8.4, specifically affecting the libavcodec/utils.c component. This flaw allows remote attackers to trigger a denial of service or potentially other impacts by crafting a malicious .mov file that causes width and height values to be improperly preserved after a failure. The vulnerability has a high CVSS v3 score of 8.3, indicating a critical severity with a network attack vector and low attack complexity, though the impact on confidentiality, integrity, and availability is rated as low. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.