CVE-2012-2801
Unspecified vulnerability in libavcodec/avs.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7...
CVE-2012-2801 is a high vulnerability (CVSS 10.0) in Ffmpeg, published September 10, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.97%, the 87th percentile. Fixed in ffmpeg 7:2.4.1-1.
Unspecified vulnerability in libavcodec/avs.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to dimensions and "out of array writes."
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in libavcodec/avs.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to dimensions and "out of array writes."
- Record
CVE-2012-2801- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in libavcodec/avs.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to dimensions and "out of array writes."
- Record
CVE-2012-2801- Updated
- 2026-11-02
EUVDEUVD-2012-2781 No score
Unspecified vulnerability in libavcodec/avs.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to dimensions and "out of array writes."
- Record
EUVD-2012-2781- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8gr4-47p2-7q2w No score
Unspecified vulnerability in libavcodec/avs.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7...
Unspecified vulnerability in libavcodec/avs.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to dimensions and "out of array writes."
- Record
GHSA-8gr4-47p2-7q2w- Updated
- 2026-11-02
OSV No score
Unspecified vulnerability in libavcodec/avs.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to dimensions and "out of array writes."
- Record
CVE-2012-2801- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-2801 No score
Unspecified vulnerability in libavcodec/avs.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to dimensions and "out of array writes."
- Record
DEBIAN-CVE-2012-2801- Updated
- 2026-11-02
Affected products
Affected packages
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
openwall.com/lists/oss-security/2012/09/02/4
libav.org/releases/libav-0.8.5.changelog
securityfocus.com/bid/55355
mandriva.com/security/advisories?name=MDVSA-2013:079
Show 10 moreShow less
ffmpeg.org/security.html
git.videolan.org?p=ffmpeg.git%3Ba=commitdiff%3Bh=1df49142bab1b7bccd11392aa9e819e297d21a6e
ubuntu.com/usn/USN-1705-1
secunia.com/advisories/50468
nvd.nist.gov/vuln/detail/CVE-2012-2801
github.com/advisories/GHSA-8gr4-47p2-7q2w
security-tracker.debian.org/tracker/CVE-2012-2801