VYPR
High severity8.8NVD Advisory· Published Feb 12, 2016· Updated May 6, 2026

CVE-2016-2328

CVE-2016-2328

Description

libswscale/swscale_unscaled.c in FFmpeg before 2.8.6 does not validate certain height values, which allows remote attackers to cause a denial of service (out-of-bounds array read access) or possibly have unspecified other impact via a crafted .cine file, related to the bayer_to_rgb24_wrapper and bayer_to_yv12_wrapper functions.

Affected products

1
  • cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*
    Range: <=2.8.5

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.