CVE-2016-5199 PUBLISHED

An off by one error resulting in an allocation of zero size in FFmpeg in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted video file.

EPSS 0.72% · 72.3th percentile

Risk Scores

EPSS Score
0.72%
72.3th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSchromium-browser38.0.2125.111-0ubuntu0.14.04.1.1061, 39.0.2171.65-0ubuntu0.14.04.1.1064, 40.0.2214.94-0ubuntu0.14.04.1.1068
Ubuntu:14.04:LTSoxide-qt1.13.6-0ubuntu0.14.04.1, 1.14.7-0ubuntu0.14.04.1, 1.14.9-0ubuntu0.14.04.1
Ubuntu:16.04:LTSoxide-qt1.18.3-0ubuntu0.16.04.1, 1.11.4-0ubuntu1, 1.11.5-0ubuntu1
Ubuntu:16.04:LTSchromium-browser45.0.2454.101-0ubuntu1.1201, 47.0.2526.73-0ubuntu1.1218, 47.0.2526.106-0ubuntu1.1221

Timeline

References

Open in Interactive Console →