CVE Catalog
CVE-2016-10192
CriticalSummary
A heap-based buffer overflow in ffserver.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure to check chunk size.
Risk Assessment
Attackers may remotely take control of the system, posing a serious security threat to the organization.
Recommendation
It is recommended to update FFmpeg to the latest version to mitigate this vulnerability.
Original NVD description (English source)
Heap-based buffer overflow in ffserver.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure to check chunk size.