CVE-2017-15672

2017-11-0617:29:00

Google

osv.dev

7.1 High

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.2%

JSON

The read_header function in libavcodec/ffv1dec.c in FFmpeg 2.4 and 3.3.4 and possibly earlier allows remote attackers to have unspecified impact via a crafted MP4 file, which triggers an out-of-bounds read.

CPENameOperatorVersion
ffmpeg.giteqn3.3.2
ffmpeg.giteqn2.4.3
ffmpeg.giteqn3.3.4
ffmpeg.giteqn2.8-de
ffmpeg.giteqn3.2-de
ffmpeg.giteqn2.4.5
ffmpeg.giteqn0.12-de
ffmpeg.giteqn2.4.12
ffmpeg.giteqn2.1-de
ffmpeg.giteqn2.3-de

Name	Operator	Version
ffmpeg.git	eq	n3.3.2
ffmpeg.git	eq	n2.4.3
ffmpeg.git	eq	n3.3.4
ffmpeg.git	eq	n2.8-de
ffmpeg.git	eq	n3.2-de
ffmpeg.git	eq	n2.4.5
ffmpeg.git	eq	n0.12-de
ffmpeg.git	eq	n2.4.12
ffmpeg.git	eq	n2.1-de
ffmpeg.git	eq	n2.3-de