VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 23, 2013· Updated Jun 16, 2026

CVE-2013-0894

CVE-2013-0894

Description

Buffer overflow in the vorbis_parse_setup_hdr_floors function in the Vorbis decoder in vorbisdec.c in libavcodec in FFmpeg through 1.1.3, as used in Google Chrome before 25.0.1364.97 on Windows and Linux and before 25.0.1364.99 on Mac OS X and other products, allows remote attackers to cause a denial of service (divide-by-zero error or out-of-bounds array access) or possibly have unspecified other impact via vectors involving a zero value for a bark map size.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9
  • FFmpeg/Ffmpeg2 versions
    cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*range: <=1.1.3
    • (no CPE)range: <=1.1.3
  • Google/Chrome2 versions
    cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*range: <25.0.1364.99
    • (no CPE)range: <25.0.1364.97
  • Canonical/Ubuntu Linux2 versions
    cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*+ 1 more
    • cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*
  • OpenSUSE/openSUSE2 versions
    cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:*
    • cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*
  • osv-coords
    pkg:rpm/opensuse/chromium&distro=openSUSE%20Tumbleweed
    Range: < 55.0.2883.75-3.1

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.