How severe is CVE-2014-3984?

CVE-2014-3984 has a CVSS 2.0 base score of 10.0, rated critical severity.

Is CVE-2014-3984 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 4% (89th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2014-3984?

CVE-2014-3984 primarily affects Libav. In total, 13 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2014-3984?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.

When was CVE-2014-3984 published?

CVE-2014-3984 was published on 2014-06-06 and last updated on 2026-06-17.

CVE-2014-3984

CVE-2014-3984 is a critical-severity vulnerability in Libav with a CVSS 2.0 base score of 10.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Critical (CVSS 2.0 base score 10.0)
EPSS exploit prediction: 4% (89th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Libav
Published: 2014-06-06
Last modified: 2026-06-17

Description

Multiple unspecified vulnerabilities in Libav before 0.8.12 allow remote attackers to have unknown impact and vectors.

Frequently asked questions

What is CVE-2014-3984?: Multiple unspecified vulnerabilities in Libav before 0.8.12 allow remote attackers to have unknown impact and vectors.
How severe is CVE-2014-3984?: CVE-2014-3984 has a CVSS 2.0 base score of 10.0, rated critical severity.
Is CVE-2014-3984 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 4% (89th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2014-3984?: CVE-2014-3984 primarily affects Libav. In total, 13 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2014-3984?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
When was CVE-2014-3984 published?: CVE-2014-3984 was published on 2014-06-06 and last updated on 2026-06-17.

References

Affected products (13)

cpe:2.3:a:libav:libav:*:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.8:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.8:beta2:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.8.1:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.8.2:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.8.3:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.8.4:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.8.5:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.8.6:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.8.7:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.8.8:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.8.9:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.8.10:*:*:*:*:*:*:*

More vulnerabilities in Libav

CVE-2011-3937 — Critical (CVSS 10.0): The H.263 codec (libavcodec/h263dec.c) in FFmpeg 0.7.x before 0.7.12, 0.8.x before 0.8.11, and unspecified versions…
CVE-2012-5144 — Critical (CVSS 10.0): Google Chrome before 23.0.1271.97, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, do not properly perform AAC…
CVE-2012-2804 — Critical (CVSS 10.0): Unspecified vulnerability in libavcodec/indeo3.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.5 has unknown impact…
CVE-2012-2803 — Critical (CVSS 10.0): Double free vulnerability in the mpeg_decode_frame function in libavcodec/mpeg12.c in FFmpeg before 0.11, and Libav…
CVE-2012-2802 — Critical (CVSS 10.0): Unspecified vulnerability in the ac3_decode_frame function in libavcodec/ac3dec.c in FFmpeg before 0.11 and Libav 0.8.x…
CVE-2012-2801 — Critical (CVSS 10.0): Unspecified vulnerability in libavcodec/avs.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before…

All CVEs affecting Libav →