CVE-2017-5037

High

Published: 24/04/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

An integer overflow in FFmpeg in Google Chrome prior to version 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.

Risk Assessment

An attacker could exploit this vulnerability to inject malicious code, potentially leading to full control over the user's system.

Recommendation

It is recommended to update Google Chrome to the latest version to mitigate this vulnerability.

Other vulnerabilities in FFmpeg in Google Chrome

CVE-2017-5051High
An integer overflow in FFmpeg in Google Chrome prior to version 57.0.2987.98 for Mac, Windows, and Linux and prior to version 57.0.2987.108 for Android allows a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.

Original NVD description (English source)

An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS