CVE-2014-8001: Cisco OPENH264

High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days.

Buffer overflow in decode.cpp in Cisco OpenH264 1.2.0 and earlier allows remote attackers to execute arbitrary code via an encoded media file.

Affected products

• Cisco OPENH264: up to and including 1.2.0

Published 2014-11-25. Last modified 2026-06-17.