CVE-2017-7863

Critical

Published: 14/04/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

FFmpeg before 2017-02-04 has an out-of-bounds write caused by a heap-based buffer overflow related to the decode_frame_common function in libavcodec/pngdec.c.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized memory access, potentially resulting in the execution of malicious code or application crashes.

Recommendation

It is recommended to update FFmpeg to a version after 2017-02-04 to mitigate this vulnerability.

Original NVD description (English source)

FFmpeg before 2017-02-04 has an out-of-bounds write caused by a heap-based buffer overflow related to the decode_frame_common function in libavcodec/pngdec.c.