CVE-2016-10191
CriticalSummary
A heap-based buffer overflow in libavformat/rtmppkt.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure to check for RTMP packet size mismatches.
Risk Assessment
An attacker can remotely take control of the system, posing a serious threat to the organization's security and data.
Recommendation
It is recommended to update FFmpeg to the latest version to mitigate this vulnerability and implement additional security measures against unauthorized access.
Original NVD description (English source)
Heap-based buffer overflow in libavformat/rtmppkt.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure to check for RTMP packet size mismatches.