VULNERABILITY INTELLIGENCE

CVE-2011-3936

CVSS score4.3 MEDIUM
EPSS probability2.54%
CISA KEVNot currently listed
Published2012-08-20
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:N/A:P

Description

The dv_extract_audio function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted DV file.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references