CVE-2017-7863

CRITICAL

Ffmpeg < 2.8.10 - Out-of-Bounds Write

Title source: rule

Description

FFmpeg before 2017-02-04 has an out-of-bounds write caused by a heap-based buffer overflow related to the decode_frame_common function in libavcodec/pngdec.c.

References (4)

Scores

CVSS v3 9.8
EPSS 0.0188
EPSS Percentile 82.9%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Classification

CWE
CWE-787
Status draft

Affected Products (2)

ffmpeg/ffmpeg < 2.8.10
debian/debian_linux

Timeline

Published Apr 14, 2017
Tracked Since Feb 18, 2026