PT-2016-7385

CVE-2016-7555

Published

2016-10-18

Updated

2017-07-01

CVSS 3.1

5.5

Medium

MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 3.1.4

Description The issue arises from a memory leak in the avi read header function when decoding an AVI file with a crafted "strh" structure.

Recommendations For versions prior to 3.1.4, update to version 3.1.4 or later to resolve the issue.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

Related identifiers

OPENSUSE-SU-2016:2556-1

OPENSUSE-SU-2016:2560-1

Found an issue in the description? Have something to add? Feel free to write us 👾