NetSight
IP …
high8.8

CVE-2017-9992

Heap-based buffer overflow in the decode_dds1 function in libavcodec/dfa.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5,…

Impact

Heap-based buffer overflow in the decode_dds1 function in libavcodec/dfa.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file.

Affected products

VendorProductAffected versions
FfmpegFfmpeg
before 2.8.12
from 3.0 before 3.0.8
from 3.1 before 3.1.8
from 3.2 before 3.2.5
from 3.3 before 3.3.1
DebianDebian Linux
Version 8.0

Weakness classification

CWE-119

References