CVE-2016-7499

Name of the Vulnerable Software and Affected Versions Libav version 11.7

Description The issue allows remote attackers to cause a denial of service, resulting in a divide-by-zero error and application crash, via a crafted mp3 file. This is due to a problem in the sbr make f master function.

Recommendations For Libav version 11.7, consider avoiding the use of the sbr make f master function until a patch is available. As a temporary workaround, restrict the processing of crafted mp3 files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.