Buffer overflow in Ffmpeg

CVE-2013-0847

The ff_id3v2_parse function in libavformat/id3v2.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via ID3v2 header data, which triggers an out-of-bounds array access.

Vulnerability class: Buffer Overflow

EPSS: 0.019 (77.2th percentile) — read the EPSS interpretation.

Affected products

  • Ffmpeg — versions 0.3, 0.3.1, 0.3.2
  • N/a — versions n/a

Weakness classification (CWE)

References