CVE-2017-7865
CRITICALFfmpeg < 2.8.9 - Out-of-Bounds Write
Title source: ruleDescription
FFmpeg before 2017-01-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the ipvideo_decode_block_opcode_0xA function in libavcodec/interplayvideo.c and the avcodec_align_dimensions2 function in libavcodec/utils.c.
Scores
CVSS v3
9.8
EPSS
0.0188
EPSS Percentile
82.9%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-787
Status
draft
Affected Products (2)
ffmpeg/ffmpeg
< 2.8.9
debian/debian_linux
Timeline
Published
Apr 14, 2017
Tracked Since
Feb 18, 2026