Patchwire CVEs, their patch status, and feeds to follow them

CVE-2016-7393

Fixed in a distro release EPSS 2%

Stack-based buffer overflow in the aac_sync function in aac_parser.c in Libav before 11.5 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.

Published 2017-02-15 · CVE record · OSV

Products: libav

Distro releases

ReleasePackageFixed in
Debian 12ffmpeg7:2.4-1
Debian 13ffmpeg7:2.4-1
Debian 14ffmpeg7:2.4-1
Debian 7libav6:0.8.18-0+deb7u1
Ubuntu Pro 14.04 LTSlibav6:9.20-0ubuntu0.14.04.1+esm1