Vulnerability in Ffmpeg

CVE-2012-2790

Unspecified vulnerability in the read_var_block_data function in libavcodec/alsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to the "number of decoded samples in first sub-block in BGMC mode."

EPSS: 0.032 (86.8th percentile) — read the EPSS interpretation.

Affected products

  • Ffmpeg — versions 0.3, 0.3.1, 0.3.2
  • Libav — versions 0.7, 0.7.1, 0.7.2
  • N/a — versions n/a

References