GHSA-gcwm-gg76-5wqr

GHSA-gcwm-gg76-5wqr PUBLISHED

Record from GitHub Advisory Database · Published May 14, 2022

Unspecified vulnerability in the ac3_decode_frame function in libavcodec/ac3dec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to the "number of output channels" and "out of array writes."

Timeline

May 14, 2022 CVE Published
Apr 29, 2026 Security Advisory
Apr 30, 2026 Distribution Patch

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-gcwm-gg76-5wqr
vulnetix vdb fixes GHSA-gcwm-gg76-5wqr

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-gcwm-gg76-5wqr/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=2c22701c371c2f3dea21fcdbb97c981939fb77af url
http://secunia.com/advisories/51257 url
http://www.openwall.com/lists/oss-security/2012/08/31/3 url
http://www.securityfocus.com/bid/55355 url
http://www.ubuntu.com/usn/USN-1705-1 url
http://ffmpeg.org/security.html url
http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=2c22701c371c2f3dea21fcdbb97c981939fb77af url
http://libav.org/releases/libav-0.8.4.changelog url
http://libav.org/releases/libav-0.8.5.changelog url
http://secunia.com/advisories/50468 url
https://nvd.nist.gov/vuln/detail/CVE-2012-2802 advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2013:079 url
http://www.openwall.com/lists/oss-security/2012/09/02/4 url

Look up in the Resolve Platform →