Vulnetix
Try Vulnetix Request Demo
CVE-2012-6618 PUBLISHED

The av_probe_input_buffer function in libavformat/utils.c in FFmpeg before 1.0.2, when running with certain -probesize values, allows remote attackers to cause a denial of service (crash) via a crafted MP3 file, possibly related to frame size or lack of sufficient "frames to estimate rate."

EPSS 1.05% · 77.4th percentile

Risk Scores

EPSS Score
1.05%
77.4th percentile

Affected Products

VendorProductVersions
Ubuntu:20.04:LTSqtwebengine-opensource-src5.12.5+dfsg-6ubuntu2, 5.12.5+dfsg-7, 5.12.5+dfsg-7build1
Ubuntu:24.04:LTSqtwebengine-opensource-src5.15.16+dfsg-1ubuntu4, 5.15.16+dfsg-1, 5.15.15+dfsg-2ubuntu1
Ubuntu:Pro:14.04:LTSlibav6:9.18-0ubuntu0.14.04.1, 6:0.8.7-1ubuntu2, 6:9.10-1ubuntu1
Ubuntu:22.04:LTSqtwebengine-opensource-src5.15.6+dfsg-1, 5.15.6+dfsg-2, 5.15.7+dfsg-2
Ubuntu:25.10qtwebengine-opensource-src5.15.19+dfsg2-1, 0, 5.15.18+dfsg-2
Ubuntu:18.04:LTSqtwebengine-opensource-src5.9.1+dfsg-4, 0, 5.9.5+dfsg-0ubuntu2

Timeline

References

Open in Interactive Console →