The ff_h263_decode_mba function in libavcodec/ituh263dec.c in Libav before 11.5 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a file with crafted dimensions.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libav | Mar 31, 2017 | Apr 19, 2016 |
| Freebsd | — | Upgrade libav | Dec 10, 2025 | Jul 16, 2015 |
| Suse | — | Upgrade libavcodec-libav56-debuginfoUpgrade libavdevice-libav55-debuginfoUpgrade libavfilter-libav5-debuginfoUpgrade libswscale-libav3Upgrade libav-debugsourceUpgrade libavcodec-libav-develUpgrade libavresample-libav2-debuginfoUpgrade libavresample-libav2Upgrade libavfilter-libav5Upgrade libavutil-libav-develUpgrade libavformat-libav-develUpgrade libavresample-libav-develUpgrade libav-tools-debuginfoUpgrade libavdevice-libav55Upgrade libavcodec-libav56Upgrade libav-toolsUpgrade libavutil-libav54Upgrade libavdevice-libav-develUpgrade libavfilter-libav-develUpgrade libswscale-libav-develUpgrade libswscale-libav3-debuginfoUpgrade libavformat-libav56-debuginfoUpgrade libavutil-libav54-debuginfoUpgrade libavformat-libav56 | Jul 26, 2016 | Apr 19, 2016 |
| Ubuntu | — | Upgrade libavformat53Upgrade libavcodec53 | Apr 4, 2016 | Apr 4, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub