CVE-2012-2779: Unspecified vulnerability in the decode_frame function in libavcodec/indeo5.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and…

Unscored severity · published Sep 10, 2012

CVE-2012-2779

Unspecified vulnerability in the decode_frame function in libavcodec/indeo5.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and…

–

CVSS

3.2%

EPSS

On KEV

Description

Unspecified vulnerability in the decode_frame function in libavcodec/indeo5.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an invalid "gop header" and decoding in a "half initialized context."

Exploitation

Is it being used?

Exploit prediction (EPSS)3.2% · higher than 88% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Ffmpeg · Ffmpeg

through 0.10.4; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more · source: NVD

Libav · Libav

0.7; 0.7; 0.7; 0.7.1; 0.7.2; 0.7.3; +8 more · source: NVD