CVE-2012-2788
Unspecified vulnerability in the avi_read_packet function in libavformat/avidec.c in FFmpeg...
CVE-2012-2788 is a high vulnerability (CVSS 10.0) in Ffmpeg, published September 10, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.20%, the 88th percentile. Fixed in ffmpeg 7:2.4.1-1.
- Severity
- 10.0 HighCVSS 2.0, NVD
- Exploit chance
- 3.20%EPSS, 88th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
7:2.4.1-1ffmpeg +3 more
Description
Unspecified vulnerability in the avi_read_packet function in libavformat/avidec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an "out of array read" when a "packet is shrunk."
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ffmpegDebian:12 | before 7:2.4.1-1 | 7:2.4.1-1 |
ffmpegDebian:13 | before 7:2.4.1-1 | 7:2.4.1-1 |
ffmpegDebian:14 | before 7:2.4.1-1 | 7:2.4.1-1 |
ffmpegDebian:6.0 From an advisory covering 7 CVEs | before 4:0.5.10-1, plus listed versions 4:0.5.2-64:0.5.4-14:0.5.5-14:0.5.6-34:0.5.8-14:0.5.9-1 | 4:0.5.10-1 |
What each source reports
NVD Score used
Unspecified vulnerability in the avi_read_packet function in libavformat/avidec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an "out of array read" when a "packet is shrunk."
- Record
CVE-2012-2788- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE ListNo score
Unspecified vulnerability in the avi_read_packet function in libavformat/avidec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an "out of array read" when a "packet is shrunk."
- Record
CVE-2012-2788- Updated
- 2026-11-02
EUVDEUVD-2012-2768No score
Unspecified vulnerability in the avi_read_packet function in libavformat/avidec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an "out of array read" when a "packet is shrunk."
- Record
EUVD-2012-2768- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wgc4-3g78-3h3jNo score
Unspecified vulnerability in the avi_read_packet function in libavformat/avidec.c in FFmpeg...
Unspecified vulnerability in the avi_read_packet function in libavformat/avidec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an "out of array read" when a "packet is shrunk."
- Record
GHSA-wgc4-3g78-3h3j- Updated
- 2026-11-02
OSVNo score
Unspecified vulnerability in the avi_read_packet function in libavformat/avidec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an "out of array read" when a "packet is shrunk."
- Record
CVE-2012-2788- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-2788No score
Unspecified vulnerability in the avi_read_packet function in libavformat/avidec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an "out of array read" when a "packet is shrunk."
- Record
DEBIAN-CVE-2012-2788- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
openwall.com/lists/oss-security/2012/09/02/4
libav.org/releases/libav-0.8.4.changelog
securityfocus.com/bid/55355
mandriva.com/security/advisories?name=MDVSA-2013:079
git.videolan.org?p=ffmpeg.git%3Ba=commitdiff%3Bh=c41ac870470c614185e1752c11f892809022248a
Show 8 moreShow less
ffmpeg.org/security.html
secunia.com/advisories/50468
nvd.nist.gov/vuln/detail/CVE-2012-2788
github.com/advisories/GHSA-wgc4-3g78-3h3j
security-tracker.debian.org/tracker/CVE-2012-2788