Critical severity9.8NVD Advisory· Published Jan 23, 2017· Updated Jun 17, 2026
CVE-2016-6164
CVE-2016-6164
Description
Integer overflow in the mov_build_index function in libavformat/mov.c in FFmpeg before 2.8.8, 3.0.x before 3.0.3 and 3.1.x before 3.1.1 allows remote attackers to have unspecified impact via vectors involving sample size.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*range: <=2.8.7
- cpe:2.3:a:ffmpeg:ffmpeg:3.0:*:*:*:*:*:*:*
- cpe:2.3:a:ffmpeg:ffmpeg:3.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ffmpeg:ffmpeg:3.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ffmpeg:ffmpeg:3.1:*:*:*:*:*:*:*
- (no CPE)range: <2.8.8, 3.0.x < 3.0.3, 3.1.x < 3.1.1
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.