Vulnerability in Ffmpeg

CVE-2013-0876

Multiple integer overflows in the (1) old_codec37 and (2) old_codec47 functions in libavcodec/sanm.c in FFmpeg before 1.1.3 allow remote attackers to have an unspecified impact via crafted LucasArts Smush data, which triggers an out-of-bounds array access.

EPSS: 0.024 (82.7th percentile) — read the EPSS interpretation.

Affected products

  • Ffmpeg — versions 0.3, 0.3.1, 0.3.2
  • N/a — versions n/a

Weakness classification (CWE)

References