DEBIAN-CVE-2016-5199

DEBIAN-CVE-2016-5199 PUBLISHED CVSS 8.800000190734863 HIGH

An off by one error resulting in an allocation of zero size in FFmpeg in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted video file.

Risk Scores

CVSS v3.0

8.800000190734863

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions
Debian:11	ffmpeg	0, 0, 0
Debian:13	ffmpeg	0, 0, 0
Debian:12	ffmpeg	0, 0, 0
Debian:14	ffmpeg	0, 0, 0

Timeline

Jan 19, 2017 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2016-5199 advisory

Open in Interactive Console →