Unscored severity · published Sep 10, 2012
CVE-2012-2786
Unspecified vulnerability in the decode_wdlt function in libavcodec/dfa.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack…
–
CVSS
3.7%
EPSS
No
On KEV
Description
Unspecified vulnerability in the decode_wdlt function in libavcodec/dfa.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an "out of array write."
Exploitation
Is it being used?
Exploit prediction (EPSS)3.7% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FF
Ffmpeg · Ffmpeg
through 0.10.4; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more · source: NVD
LI
Libav · Libav
0.8; 0.8; 0.8.1; 0.8.2; 0.8.3; 0.7; +8 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-2786
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-2786
ffmpeg.org
http://ffmpeg.org/security.html
git.videolan.org
http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=d1c95d2ce39560e251fdb14f4af91b04fd7b845c
libav.org
http://libav.org/releases/libav-0.7.7.changelog
libav.org
http://libav.org/releases/libav-0.8.4.changelog
secunia.com
http://secunia.com/advisories/50468
secunia.com
http://secunia.com/advisories/51257
More from Ffmpeg
9.8
CVE-2026-75143
FFmpeg Heap Buffer Overflow via RIST Protocol Reader
9.8
CVE-2026-40962
FFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryption) subsample data to libavformat/mov.c
9.8
CVE-2024-35368
FFmpeg n7.0 is affected by a Double Free via the rkmpp_retrieve_frame function within libavcodec/rkmppdec.c
9.8
CVE-2024-31581
FFmpeg version n6.1 was discovered to contain an improper validation of array index vulnerability in libavcodec/cbs_h266_syntax_template.c
9.8
CVE-2024-22862
Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the JJPEG XL Parser