Skip to main content

Improper Validation of Array Index


Severity High
Score 8.8/10


In FFmpeg before n4.1, improper handling of frame types (other than EAC3_FRAME_TYPE_INDEPENDENT) that have multiple independent substreams in the "handle_eac3" function in "libavformat/movenc.c" may trigger an out-of-array access while converting a crafted AVI file to MPEG4, leading to a denial of service or possibly unspecified other impact.

  • LOW
  • HIGH
  • NONE
  • HIGH
  • HIGH

CWE-129 - Improper Validation of Array Index

The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

Advisory Timeline

  • Published