The ff_h263_decode_mba function in libavcodec/ituh263dec.c in Libav before 11.5 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a file with crafted dimensions.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libav | Mar 31, 2017 | Apr 19, 2016 |
| Freebsd | — | Upgrade libav | Dec 10, 2025 | Jul 16, 2015 |
| Suse | — | Upgrade libavfilter-libav-develUpgrade libavdevice-libav-develUpgrade libavdevice-libav55Upgrade libavformat-libav56Upgrade libavcodec-libav56Upgrade libavformat-libav56-debuginfoUpgrade libav-toolsUpgrade libavutil-libav54-debuginfoUpgrade libavutil-libav54Upgrade libswscale-libav3-debuginfoUpgrade libswscale-libav-develUpgrade libavresample-libav-develUpgrade libav-debugsourceUpgrade libavutil-libav-develUpgrade libavcodec-libav56-debuginfoUpgrade libavformat-libav-develUpgrade libav-tools-debuginfoUpgrade libavresample-libav2-debuginfoUpgrade libavfilter-libav5Upgrade libavfilter-libav5-debuginfoUpgrade libavdevice-libav55-debuginfoUpgrade libswscale-libav3Upgrade libavcodec-libav-develUpgrade libavresample-libav2 | Jul 26, 2016 | Apr 19, 2016 |
| Ubuntu | — | Upgrade libavcodec53Upgrade libavformat53 | Apr 4, 2016 | Apr 4, 2016 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub