VULNERABILITY INTELLIGENCE

CVE-2010-4705

CVSS score9.3 HIGH
EPSS probability1.32%
CISA KEVNot currently listed
Published2011-01-22
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Integer overflow in the vorbis_residue_decode_internal function in libavcodec/vorbis_dec.c in the Vorbis decoder in FFmpeg, possibly 0.6, has unspecified impact and remote attack vectors, related to the sizes of certain integer data types. NOTE: this might overlap CVE-2011-0480.

Primary references