High severity7.1NVD Advisory· Published Mar 21, 2017· Updated Jun 17, 2026

CVE-2017-7208

Description

The decode_residual function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service (buffer over-read) or obtain sensitive information from process memory via a crafted h264 video file.

Affected products

Libav/Libav
cpe:2.3:a:libav:libav:9.21:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

bugzilla.libav.org/show_bug.cginvdIssue Tracking
www.debian.org/security/2017/dsa-4012nvd
www.securityfocus.com/bid/97005nvd

News mentions

No linked articles in our index yet.

cvss	0.461
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000