CVE-2016-10191: ffmpeg
CVSS: 9.8v3.0CriticalModified
AliasesALPINE-CVE-2016-10191UBUNTU-CVE-2016-10191DEBIAN-CVE-2016-10191CGA-7hjj-32c9-wrc2CGA-9vqh-x23h-xhhwCGA-c54w-m8fc-pj5jCGA-fm3f-gvh8-2mf6CGA-jm86-9xpx-47x5CGA-qqr3-x6vx-82f8CGA-x5p7-fg9h-6c93CGA-x8vx-4hx7-g38m
Published 09-02-2017Last modified 06-08-2024
Vulnerability summary
CVE-2016-10191 is a critical (CVSS 9.8) vulnerability in ffmpeg. EPSS estimates a 7.46% chance of exploitation in the next 30 days, higher than 94.4% of scored vulnerabilities.
CVSS score
9.8/10
010
Critical · v3.0 (NVD)EPSS score
7.46%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 5 · Related 3Timeline
- 09-02-2017PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Heap-based buffer overflow in libavformat/rtmppkt.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure to check for RTMP packet size mismatches.
CVSS metrics
6 scores · 5 sources · 2 versionsCritical 9.8Preferred score · NVD (NIST)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSourcesAll 5 agree
- OSV · AlpineEcosystem advisory · calculated9.8CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated9.8CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated9.8CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · ChainguardEcosystem advisory · calculated9.8CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
High 7.5Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:P/I:P/A:PSourcesSingle source
EPSS trend
Probability
7.46%
Chance of exploitation in the next 30 days
Percentile
94%
Versus all other CVEs
30-day change
0.00 pp
From 7.46% on 18-09-2026
18-09-202618-10-2026
EPSS score7.46%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Chainguard4 products
- torchaudio-ffmpeg-tarballsAll versions (No fix recorded)
- torchaudio-ffmpeg-tarballs-4.4.4All versions (No fix recorded)
- torchaudio-ffmpeg-tarballs-5.0.3All versions (No fix recorded)
- torchaudio-ffmpeg-tarballs-6.0All versions (No fix recorded)
Ubuntu2 products
- ffmpeg< 7:2.8.11-0ubuntu0.16.04.1
- libavAll versions (No fix recorded)
Alpine1 product
- ffmpeg< 2.8.11-r0 | < 3.0.7-r0
Debian1 product
- ffmpeg< 7:3.2.2-1
Ffmpeg1 product
- ffmpegEOL≤ 2.8.9 | 3.0 | 3.0.1 | 3.0.2 | 3.0.3 | 3.0.4 | 3.1 | 3.1.1 | 3.1.2 | 3.1.3 | 3.1.4 | 3.1.5 | 3.2 | 3.2.1
5 vendors · 9 products
References
10 links
- www.openwall.com/lists/oss-security/2017/01/31/12Mailing ListX Refsource MLISTPatchThird Party AdvisoryREPORTFIX
- www.openwall.com/lists/oss-security/2017/02/02/1Mailing ListX Refsource MLISTPatchThird Party AdvisoryFIX