Buffer overflow in Ffmpeg

CVE-2012-0848

Heap-based buffer overflow in the ws_snd_decode_frame function in libavcodec/ws-snd1.c in FFmpeg 0.9.1 allows remote attackers to cause a denial of service (application crash) via a crafted media file, related to an incorrect calculation, aka "wrong samples count."

Vulnerability class: Buffer Overflow

EPSS: 0.022 (80.5th percentile) — read the EPSS interpretation.

Affected products

  • Ffmpeg — versions 0.9.1
  • N/a — versions n/a

Weakness classification (CWE)

References