VYPR
← All advisories
High severity7.8NVD Advisory· Published Jun 28, 2017· Updated Jun 17, 2026

CVE-2017-9991

CVE-2017-9991

Description

Heap-based buffer overflow in the xwd_decode_frame function in libavcodec/xwddec.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

24
  • FFmpeg/Ffmpeg24 versions
    cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*+ 23 more
    • cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*range: <=2.8.11
    • cpe:2.3:a:ffmpeg:ffmpeg:3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:3.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:3.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:3.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:3.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:3.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:3.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:3.0.7:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:3.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:3.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:3.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:3.1.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:3.1.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:3.1.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:3.1.7:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:3.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:3.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:3.2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:3.2.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:3.2.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ffmpeg:ffmpeg:3.3:*:*:*:*:*:*:*
    • (no CPE)range: <2.8.12, <3.0.8, <3.1.8, <3.2.5, <3.3.1

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.