PoC Index

CVE-2016-10190

CRITICAL 9.8EPSS 8.4%

Heap-based buffer overflow in libavformat/http.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote web servers to execute arbitrary code via a negative chunk size in an HTTP response.

CVSS v3.0
9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0
7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
8.36% chance of exploitation in the next 30 days, 95th percentile
Published
2017-02-09
Updated
2024-08-06

Proof-of-concept exploits (2)

References

Related