CVE-2016-9561

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 3.2.1

Description The issue allows remote attackers to cause a denial of service by allocating huge memory via a crafted MOV file. This is due to a problem in the che configure function in libavcodec/aacdec template.c.

Recommendations For versions prior to 3.2.1, update to version 3.2.1 or later to resolve the issue. As a temporary workaround, consider restricting access to crafted MOV files to minimize the risk of exploitation.