CVE-2013-0873
The read_header function in libavcodec/shorten.c in FFmpeg before 1.1.3 allows remote attackers...
The read_header function in libavcodec/shorten.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via an invalid channel count, related to "freeing invalid addresses."
Exploit likelihood
What each source reports
NVD Score used
The read_header function in libavcodec/shorten.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via an invalid channel count, related to "freeing invalid addresses."
- Record
CVE-2013-0873- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
The read_header function in libavcodec/shorten.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via an invalid channel count, related to "freeing invalid addresses."
- Record
CVE-2013-0873- Updated
- 2026-11-02
EUVDEUVD-2013-0884 No score
The read_header function in libavcodec/shorten.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via an invalid channel count, related to "freeing invalid addresses."
- Record
EUVD-2013-0884- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rh57-95h4-wx3g No score
The read_header function in libavcodec/shorten.c in FFmpeg before 1.1.3 allows remote attackers...
The read_header function in libavcodec/shorten.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via an invalid channel count, related to "freeing invalid addresses."
- Record
GHSA-rh57-95h4-wx3g- Weakness
- CWE-20
- Updated
- 2026-11-02
OSV No score
The read_header function in libavcodec/shorten.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via an invalid channel count, related to "freeing invalid addresses."
- Record
CVE-2013-0873- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-0873 No score
The read_header function in libavcodec/shorten.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via an invalid channel count, related to "freeing invalid addresses."
- Record
DEBIAN-CVE-2013-0873- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-0873 is a high vulnerability (CVSS 10.0) in Ffmpeg, published November 23, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.84%, the 86th percentile. Fixed in ffmpeg 7:2.4.1-1.
References
git.videolan.org?p=ffmpeg.git%3Ba=commitdiff%3Bh=4f1279154ee9baf2078241bf5619774970d18b25
ffmpeg.org/security.html
security.gentoo.org/glsa/201603-06
nvd.nist.gov/vuln/detail/CVE-2013-0873
github.com/advisories/GHSA-rh57-95h4-wx3g
security-tracker.debian.org/tracker/CVE-2013-0873