Patchwire CVEs, their patch status, and feeds to follow them

CVE-2011-3929

Fixed in a distro release EPSS 5%

The avpriv_dv_produce_packet function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) and possibly execute arbitrary code via a crafted DV file.

Published 2012-08-20 · CVE record · OSV

Products: ffmpeg, libav

Distro releases

ReleasePackageFixed in
Debian 12ffmpeg7:2.4.1-1
Debian 13ffmpeg7:2.4.1-1
Debian 14ffmpeg7:2.4.1-1
Debian 6.0ffmpeg4:0.5.8-1