CVE-2016-7555
MEDIUMFfmpeg < 3.1.3 - Information Disclosure
Title source: ruleDescription
The avi_read_header function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to memory leak when decoding an AVI file that has a crafted "strh" structure.
Scores
CVSS v3
5.5
EPSS
0.0033
EPSS Percentile
55.7%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Classification
CWE
CWE-200
Status
published
Affected Products (2)
ffmpeg/ffmpeg
< 3.1.3
n/a/n/a
Timeline
Published
Dec 23, 2016
Tracked Since
Feb 18, 2026