GCVE-110-CERTCC-2016-772447

Advisory PublishedCVSS 5.0/10

Vulnetix · Advisory published January 12, 2016

ffmpeg is a "cross-platform solution to record, convert and stream audio and video". ffmpeg is vulnerable to local file disclosure due to improper enforcement of domain restrictions when processing playlist files.

Download JSON Open in Console

Risk Scores

CVSS 2.0

5.0/10

Medium · AV:N/AC:L/Au:N/C:P/I:N/A:N

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact3d1_population3d1_direct_report0

certcc-cvss-temporal-env

temporal_score3.9remediation_levelOFreport_confidenceCenvironmental_score2.91185042022target_distributionMenvironmental_vectorCDP:ND/TD:M/CR:ND/IR:ND/AR:ND

Aliases

CVE-2016-1897 CVE-2016-1898

References

ffmpeg and Libav cross-domain information disclosure vulnerability

url

ffmpeg and Libav cross-domain information disclosure vulnerability

url

ffmpeg and Libav cross-domain information disclosure vulnerability

advisory

Browse GCVE Records

72,337 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON