{"id":"CVE-2011-3937","aliases":["EUVD-2011-3890","GHSA-jj3j-75wc-9j9f"],"status":"published","title":"The H.263 codec (libavcodec/h263dec.c) in FFmpeg 0.7.x before 0.7.12, 0.8.x before 0.8.11, and...","description":"The H.263 codec (libavcodec/h263dec.c) in FFmpeg 0.7.x before 0.7.12, 0.8.x before 0.8.11, and unspecified versions before 0.10, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 has unspecified impact and attack vectors related to \"width/height changing with frame threads.\"","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0227,"percentile":0.83173,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2013-01-05T00:00:00Z","modified":"2026-06-16T23:34:10Z","products":[{"vendor":"ffmpeg","product":"ffmpeg"},{"vendor":"libav","product":"libav"}],"references":[{"url":"http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=71db86d53b5c6872cea31bf714a1a38ec78feaba","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:079","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]},{"url":"http://ffmpeg.org/security.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://git.libav.org/?p=libav.git%3Ba=commit%3Bh=71db86d53b5c6872cea31bf714a1a38ec78feaba","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://libav.org/news.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-3937"},{"url":"http://git.libav.org/?p=libav.git;a=commit;h=71db86d53b5c6872cea31bf714a1a38ec78feaba"},{"url":"http://git.videolan.org/?p=ffmpeg.git;a=commit;h=71db86d53b5c6872cea31bf714a1a38ec78feaba"},{"url":"https://github.com/advisories/GHSA-jj3j-75wc-9j9f"}],"sources":{"cve":[{"id":"CVE-2011-3937","description":"The H.263 codec (libavcodec/h263dec.c) in FFmpeg 0.7.x before 0.7.12, 0.8.x before 0.8.11, and unspecified versions before 0.10, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 has unspecified impact and attack vectors related to \"width/height changing with frame threads.\"","status":"published","published":"2013-01-05T00:00:00Z","modified":"2024-08-06T23:53:32.223Z","updated_at":"2026-11-02T14:35:37.324501Z"}],"euvd":[{"id":"EUVD-2011-3890","description":"The H.263 codec (libavcodec/h263dec.c) in FFmpeg 0.7.x before 0.7.12, 0.8.x before 0.8.11, and unspecified versions before 0.10, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 has unspecified impact and attack vectors related to \"width/height changing with frame threads.\"","status":"published","published":"2013-01-05T00:00:00Z","modified":"2024-08-06T23:53:32Z","updated_at":"2026-11-03T01:39:50.327874Z"}],"ghsa":[{"id":"GHSA-jj3j-75wc-9j9f","title":"The H.263 codec (libavcodec/h263dec.c) in FFmpeg 0.7.x before 0.7.12, 0.8.x before 0.8.11, and...","description":"The H.263 codec (libavcodec/h263dec.c) in FFmpeg 0.7.x before 0.7.12, 0.8.x before 0.8.11, and unspecified versions before 0.10, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 has unspecified impact and attack vectors related to \"width/height changing with frame threads.\"","status":"published","published":"2022-05-14T02:17:28Z","modified":"2025-04-11T04:07:08Z","updated_at":"2026-11-02T15:01:13.040475Z"}],"nvd":[{"id":"CVE-2011-3937","description":"The H.263 codec (libavcodec/h263dec.c) in FFmpeg 0.7.x before 0.7.12, 0.8.x before 0.8.11, and unspecified versions before 0.10, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 has unspecified impact and attack vectors related to \"width/height changing with frame threads.\"","status":"published","published":"2013-01-05T00:55:02.43Z","modified":"2026-06-16T23:34:10.8Z","cvss":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:02:12.639283Z"}]}}