CVE-2017-7866

Critical

Published: 14/04/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

FFmpeg before January 23, 2017, has an out-of-bounds write caused by a stack-based buffer overflow related to the decode_zbuf function in libavcodec/pngdec.c.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized memory access, potentially resulting in the execution of malicious code or application crashes.

Recommendation

It is recommended to update FFmpeg to a version after January 23, 2017, to mitigate this vulnerability.

Original NVD description (English source)

FFmpeg before 2017-01-23 has an out-of-bounds write caused by a stack-based buffer overflow related to the decode_zbuf function in libavcodec/pngdec.c.