CVE-2012-2775

Fixed in a distro release EPSS 3%

Unspecified vulnerability in the read_var_block_data function in libavcodec/alsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to a large order and an "out of array write in quant_cof."

Published 2012-09-10 · CVE record · OSV

Products: libav, ffmpeg

Distro releases