CVE-2017-11399

2017-07-1719:29:00

Google

osv.dev

0.003 Low

EPSS

Percentile

69.9%

JSON

Integer overflow in the ape_decode_frame function in libavcodec/apedec.c in FFmpeg 2.4 through 3.3.2 allows remote attackers to cause a denial of service (out-of-array access and application crash) or possibly have unspecified other impact via a crafted APE file.

CPENameOperatorVersion
ffmpegeq3.1.7-r0
ffmpeg.giteqn3.3.2
ffmpegeq0.11-r0
ffmpeg.giteqn2.4.3
ffmpegeq0.6.1-r1
ffmpegeq0.10-r0
ffmpegeq2.2.4-r2
ffmpeg.giteqn2.1-de
ffmpegeq0.6-r0
ffmpegeq2.3.2-r0

Name	Operator	Version
ffmpeg	eq	3.1.7-r0
ffmpeg.git	eq	n3.3.2
ffmpeg	eq	0.11-r0
ffmpeg.git	eq	n2.4.3
ffmpeg	eq	0.6.1-r1
ffmpeg	eq	0.10-r0
ffmpeg	eq	2.2.4-r2
ffmpeg.git	eq	n2.1-de
ffmpeg	eq	0.6-r0
ffmpeg	eq	2.3.2-r0