Vulnerability in Ffmpeg

CVE-2012-2803

Double free vulnerability in the mpeg_decode_frame function in libavcodec/mpeg12.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, has unknown impact and attack vectors, related to resetting the data size value.

EPSS: 0.033 (87.4th percentile) — read the EPSS interpretation.

Affected products

  • Ffmpeg — versions 0.3, 0.3.1, 0.3.2
  • Libav — versions 0.8, 0.8.1, 0.8.2
  • N/a — versions n/a

Weakness classification (CWE)

References