CVE-2016-7450
The ff_log2_16bit_c function in libavutil/intmath.h in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when it decodes a malformed A...
Original description
The description as published by the source.
The ff_log2_16bit_c function in libavutil/intmath.h in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when it decodes a malformed AIFF file.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2016-7450 ffmpeg Fixed in: 7:3.1.4-1
References
- advisory openwall.com
- advisory securityfocus.com
- advisory security.gentoo.org