CVE-2017-16840

2017-11-2108:29:00

Google

osv.dev

9.1 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.2%

JSON

The VC-2 Video Compression encoder in FFmpeg 3.0 and 3.4 allows remote attackers to cause a denial of service (out-of-bounds read) because of incorrect buffer padding for non-Haar wavelets, related to libavcodec/vc2enc.c and libavcodec/vc2enc_dwt.c.

CPENameOperatorVersion
ffmpeg.giteqn2.8-de
ffmpeg.giteqn3.2-de
ffmpeg.giteqn3.0.6
ffmpeg.giteqn0.12-de
ffmpeg.giteqn3.0.1
ffmpeg.giteqn2.1-de
ffmpeg.giteqn2.3-de
ffmpeg.giteqn1.1-de
ffmpeg.giteqn3.1-de
ffmpeg.giteqn2.6-de

Name	Operator	Version
ffmpeg.git	eq	n2.8-de
ffmpeg.git	eq	n3.2-de
ffmpeg.git	eq	n3.0.6
ffmpeg.git	eq	n0.12-de
ffmpeg.git	eq	n3.0.1
ffmpeg.git	eq	n2.1-de
ffmpeg.git	eq	n2.3-de
ffmpeg.git	eq	n1.1-de
ffmpeg.git	eq	n3.1-de
ffmpeg.git	eq	n2.6-de