CVE-2016-6832

Heap-based buffer overflow in the ff_audio_resample function in resample.c in libav before 11.4 allows remote attackers to cause a denial of service (crash) via vectors related to buffer resizing.
Configurations

Configuration 1 (hide)

cpe:2.3:a:libav:libav:*:*:*:*:*:*:*:*

History

21 Nov 2024, 02:56

Type Values Removed Values Added
References () http://www.openwall.com/lists/oss-security/2016/08/13/1 - Exploit, Mailing List, Third Party Advisory () http://www.openwall.com/lists/oss-security/2016/08/13/1 - Exploit, Mailing List, Third Party Advisory
References () http://www.openwall.com/lists/oss-security/2016/08/18/1 - Exploit, Mailing List, Patch, Third Party Advisory () http://www.openwall.com/lists/oss-security/2016/08/18/1 - Exploit, Mailing List, Patch, Third Party Advisory
References () https://blogs.gentoo.org/ago/2016/08/07/libav-heap-based-buffer-overflow-in-ff_audio_resample-resample-c/ - Exploit, Third Party Advisory () https://blogs.gentoo.org/ago/2016/08/07/libav-heap-based-buffer-overflow-in-ff_audio_resample-resample-c/ - Exploit, Third Party Advisory
References () https://bugzilla.libav.org/show_bug.cgi?id=825 - Exploit, Issue Tracking, Patch, Third Party Advisory, VDB Entry () https://bugzilla.libav.org/show_bug.cgi?id=825 - Exploit, Issue Tracking, Patch, Third Party Advisory, VDB Entry
References () https://git.libav.org/?p=libav.git%3Ba=commit%3Bh=0ac8ff618c5e6d878c547a8877e714ed728950ce - () https://git.libav.org/?p=libav.git%3Ba=commit%3Bh=0ac8ff618c5e6d878c547a8877e714ed728950ce -

07 Nov 2023, 02:34

Type Values Removed Values Added
References
  • {'url': 'https://git.libav.org/?p=libav.git;a=commit;h=0ac8ff618c5e6d878c547a8877e714ed728950ce', 'name': 'https://git.libav.org/?p=libav.git;a=commit;h=0ac8ff618c5e6d878c547a8877e714ed728950ce', 'tags': ['Patch'], 'refsource': 'CONFIRM'}
  • () https://git.libav.org/?p=libav.git%3Ba=commit%3Bh=0ac8ff618c5e6d878c547a8877e714ed728950ce -

Information

Published : 2017-02-15 19:59

Updated : 2024-11-21 02:56


NVD link : CVE-2016-6832

Mitre link : CVE-2016-6832

CVE.ORG link : CVE-2016-6832


JSON object : View

Products Affected

libav

  • libav
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer