DEBIAN-CVE-2011-3936

DEBIAN-CVE-2011-3936 PUBLISHED CVSS 8.699999809265137 HIGH

The dv_extract_audio function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted DV file.

Risk Scores

CVSS v4.0

8.699999809265137

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Products

Vendor	Product	Versions
Debian:13	ffmpeg	0, 0, 0
Debian:12	ffmpeg	0, 0, 0
Debian:11	ffmpeg	0, 0, 0
Debian:14	ffmpeg	0, 0, 0

Timeline

Aug 20, 2012 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2011-3936 advisory

Open in Interactive Console →