CVE-2012-6618
ffmpeg ffmpeg: no CVSS score yet. EPSS 1.6% chance of exploitation in the next 30 days.
The av_probe_input_buffer function in libavformat/utils.c in FFmpeg before 1.0.2, when running with certain -probesize values, allows remote attackers to cause a denial of service (crash) via a crafted MP3 file, possibly related to frame size or lack of sufficient "frames to estimate rate."
- EPSS
- 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-11-01)
- CWE
- CWE-119
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ffmpeg:ffmpeg