VDB

DEBIAN-CVE-2012-0852

DEBIAN-CVE-2012-0852 PUBLISHED CVSS 9.300000190734863 CRITICAL

The adpcm_decode_frame function in adpcm.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an ADPCM file with the number of channels not equal to two.

Risk Scores

CVSS v4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Products

VendorProductVersions
Debian:11ffmpeg0, 0, 0
Debian:14ffmpeg0, 0, 0
Debian:13ffmpeg0, 0, 0
Debian:12ffmpeg0, 0, 0

Timeline

  • Aug 20, 2012 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›