CVE-2016-9824

MEDIUM

libav 11.8 - Denial of Service via Integer Overflow in swscale.c

Title source: llm

Integer overflow in libswscale/x86/swscale.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via a crafted file.

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

Exploit, Third Party Advisory x_refsource_misc

CVSS v3 5.5

EPSS 0.0094

EPSS Percentile 56.3%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE

CWE-190

Status published

Products (1)

libav/libav 11.8

Published Mar 01, 2017

Tracked Since Feb 18, 2026