CVE-2013-0870 — Ffmpeg vulnerability

4 documents4 sources
Severity
9.8CRITICALNVD
EPSS
0.5%
top 35.65%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
FfmpegDebian Ffmpeg
Timeline
PublishedAug 28
Latest updateMay 17

Description

The 'vp3_decode_frame' function in FFmpeg 1.1.4 moves threads check out of header packet type check.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

▶NVDffmpeg/ffmpeg1.1.4
▶debiandebian/ffmpeg

🔴Vulnerability Details

1
GHSA
GHSA-pfch-v36x-65ww: The 'vp3_decode_frame' function in FFmpeg 1↗2022-05-17
▶

📋Vendor Advisories

1
Debian
CVE-2013-0870: ffmpeg - The 'vp3_decode_frame' function in FFmpeg 1.1.4 moves threads check out of heade...↗2013
▶