Improper input validation in Ffmpeg

CVE-2011-2160

The VC-1 decoding functionality in FFmpeg before 0.5.4, as used in MPlayer and other products, does not properly restrict read operations, which allows remote attackers to have an unspecified impact via a crafted VC-1 file, a related issue…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.008 (73.6th percentile) — read the EPSS interpretation.