CVE-2012-2791
Multiple unspecified vulnerabilities in the (1) decode_band_hdr function in indeo4.c and (2)...
Multiple unspecified vulnerabilities in the (1) decode_band_hdr function in indeo4.c and (2) ff_ivi_decode_blocks function in ivi_common.c in libavcodec/ in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, have unknown impact and attack vectors, related to the "transform size."
Exploit likelihood
What each source reports
NVD Score used
Multiple unspecified vulnerabilities in the (1) decode_band_hdr function in indeo4.c and (2) ff_ivi_decode_blocks function in ivi_common.c in libavcodec/ in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, have unknown impact and attack vectors, related to the "transform size."
- Record
CVE-2012-2791- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Multiple unspecified vulnerabilities in the (1) decode_band_hdr function in indeo4.c and (2) ff_ivi_decode_blocks function in ivi_common.c in libavcodec/ in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, have unknown impact and attack vectors, related to the "transform size."
- Record
CVE-2012-2791- Updated
- 2026-11-02
EUVDEUVD-2012-2771 No score
Multiple unspecified vulnerabilities in the (1) decode_band_hdr function in indeo4.c and (2) ff_ivi_decode_blocks function in ivi_common.c in libavcodec/ in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, have unknown impact and attack vectors, related to the "transform size."
- Record
EUVD-2012-2771- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4768-g35x-83q9 No score
Multiple unspecified vulnerabilities in the (1) decode_band_hdr function in indeo4.c and (2)...
Multiple unspecified vulnerabilities in the (1) decode_band_hdr function in indeo4.c and (2) ff_ivi_decode_blocks function in ivi_common.c in libavcodec/ in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, have unknown impact and attack vectors, related to the "transform size."
- Record
GHSA-4768-g35x-83q9- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-2791 is a high vulnerability (CVSS 10.0) in Ffmpeg, published September 10, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.12%, the 87th percentile. No source names a fixed version.
References
openwall.com/lists/oss-security/2012/09/02/4
libav.org/releases/libav-0.8.5.changelog
securityfocus.com/bid/55355
ffmpeg.org/security.html
Show 6 moreShow less
git.videolan.org?p=ffmpeg.git%3Ba=commitdiff%3Bh=0846719dd11ab3f7a7caee13e7af71f71d913389
ubuntu.com/usn/USN-1705-1
secunia.com/advisories/50468
nvd.nist.gov/vuln/detail/CVE-2012-2791
github.com/advisories/GHSA-4768-g35x-83q9