libavcodec/xface.h in FFmpeg before 2.5.2 establishes certain digits and words array dimensions that do not satisfy a required mathematical relationship, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted X-Face image data.
libavcodec/xface.h en FFmpeg anterior a 2.5.2 establece ciertas dimensiones de arrays de dígitos y palabras que no satisfacen una relación matemática requirida, lo que permite a atacantes remotos causar una denegación de servicio (acceso al array fuera de rango) o posiblemente tener otro impacto no especificado a través de datos de imágenes X-Face manipulados.
Multiple vulnerabilities have been found in FFmpeg, the worst of which could lead to arbitrary code execution or Denial of Service condition. Versions less than 2.6.3 are affected.
