CVE-2016-9561
MEDIUMFfmpeg < 3.2 - Resource Management Error
Title source: ruleDescription
The che_configure function in libavcodec/aacdec_template.c in FFmpeg before 3.2.1 allows remote attackers to cause a denial of service (allocation of huge memory, and being killed by the OS) via a crafted MOV file.
Scores
CVSS v3
5.5
EPSS
0.0024
EPSS Percentile
47.1%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Classification
CWE
CWE-399
Status
published
Affected Products (2)
ffmpeg/ffmpeg
< 3.2
n/a/n/a
Timeline
Published
Dec 23, 2016
Tracked Since
Feb 18, 2026