CVE-2015-8364: Integer overflow in the ff_ivi_init_planes function in libavcodec/ivi.c in FFmpeg before 2.6.5, 2.7.x befor...

Security readout for executives and security teams

CVE-2015-8364 is a flaw in FFmpeg’s handling of Indeo Video Interactive media. A specially crafted media file could make vulnerable FFmpeg versions read or write outside heap memory, causing a crash and possibly other unspecified effects. The main business concern is service disruption in systems that process untrusted video or image content. Exposure is most likely in media upload, transcoding, thumbnailing, content moderation, archival, or security-scanning workflows using affected FFmpeg or libav packages on untrusted media. Prioritize remediation where FFmpeg processes files from customers, partners, or the internet. Internal-only systems handling trusted media are lower urgency, but legacy media-processing hosts should still be updated during normal patch cycles. Mitigation focus: Upgrade FFmpeg outside the affected version ranges cited by the CVE record.; Apply vendor security updates from Ubuntu, openSUSE, Debian, or your distribution maintainer.; Inventory applications that bundle FFmpeg instead of using system packages..

Prepared

Jun 13, 2026, 21:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.