Vulnerability in Ffmpeg

CVE-2012-2789

Unspecified vulnerability in the avi_read_packet function in libavformat/avidec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to a large number of vector coded coefficients (num_vec_coeffs).

EPSS: 0.032 (86.8th percentile) — read the EPSS interpretation.

Affected products

  • Ffmpeg — versions 0.3, 0.3.1, 0.3.2
  • Libav — versions 0.7, 0.7.1, 0.7.2
  • N/a — versions n/a

References