CVE-2012-2776
Unspecified vulnerability in the decode_cell_data function in libavcodec/indeo3.c in FFmpeg...
CVE-2012-2776 is a high vulnerability (CVSS 10.0) in Ffmpeg, published September 10, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.12%, the 87th percentile. Fixed in ffmpeg 7:2.4.1-1.
Unspecified vulnerability in the decode_cell_data function in libavcodec/indeo3.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to an "out of picture write."
Exploit likelihood
What each source reports
NVD Score used
10.0
Unspecified vulnerability in the decode_cell_data function in libavcodec/indeo3.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to an "out of picture write."
- Record
CVE-2012-2776- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the decode_cell_data function in libavcodec/indeo3.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to an "out of picture write."
- Record
CVE-2012-2776- Updated
- 2026-11-02
EUVDEUVD-2012-2756 No score
Unspecified vulnerability in the decode_cell_data function in libavcodec/indeo3.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to an "out of picture write."
- Record
EUVD-2012-2756- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jg49-fg57-574h No score
Unspecified vulnerability in the decode_cell_data function in libavcodec/indeo3.c in FFmpeg...
Unspecified vulnerability in the decode_cell_data function in libavcodec/indeo3.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to an "out of picture write."
- Record
GHSA-jg49-fg57-574h- Updated
- 2026-11-02
OSV No score
Unspecified vulnerability in the decode_cell_data function in libavcodec/indeo3.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to an "out of picture write."
- Record
CVE-2012-2776- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-2776 No score
Unspecified vulnerability in the decode_cell_data function in libavcodec/indeo3.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to an "out of picture write."
- Record
DEBIAN-CVE-2012-2776- Updated
- 2026-11-02
Affected products
Affected packages
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
git.videolan.org?p=ffmpeg.git%3Ba=commitdiff%3Bh=ba775a54bc2136ec5da85385a923b05ee6fab159
openwall.com/lists/oss-security/2012/09/02/4
libav.org/releases/libav-0.8.4.changelog
securityfocus.com/bid/55355
mandriva.com/security/advisories?name=MDVSA-2013:079
openwall.com/lists/oss-security/2012/08/31/3