Out-of-bounds

The rleunpack function in vmdav.c in libavcodec in FFmpeg git 20130328 through 20130501 does not properly use the bytestream2 API, which allows remote attackers to cause a denial of service out-of-bounds array access and application crash via crafted RLE data. NOTE: the vendor has listed this as ...

CVE-2013-3670

CVE-2013-3670 affects FFmpeg’s libavcodec: the rle_unpack function in vmdav.c (FFmpeg git 20130328 through 20130501) does not properly use the bytestream2 API, enabling a remote attacker to trigger a denial of service via crafted RLE data (out-of-bounds array access leading to an application cras...