CVE-2016-10192
- Source
- https://cve.org/CVERecord?id=CVE-2016-10192
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-10192.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2016-10192
- Downstream
- Related
- Published
- 2017-02-09T15:59:00.753Z
- Modified
- 2026-02-11T23:54:13.348211Z
- Severity
-
- 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
Heap-based buffer overflow in ffserver.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure to check chunk size.
- References
-
- http://www.openwall.com/lists/oss-security/2017/01/31/12
- http://www.openwall.com/lists/oss-security/2017/02/02/1
- http://www.securityfocus.com/bid/95991
- https://ffmpeg.org/security.html
- http://www.openwall.com/lists/oss-security/2017/01/31/12
- http://www.openwall.com/lists/oss-security/2017/02/02/1
- https://github.com/FFmpeg/FFmpeg/commit/a5d25faa3f4b18dac737fdb35d0dd68eb0dc2156
- http://www.openwall.com/lists/oss-security/2017/01/31/12
- http://www.openwall.com/lists/oss-security/2017/02/02/1
Affected packages
Git / github.com/ffmpeg/ffmpeg
Affected ranges
- Type
- GIT
- Repo
- https://github.com/ffmpeg/ffmpeg
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
Affected versions
Other
N
n0.*
n0.11-dev
n0.12-dev
n0.8
n1.*
n1.1-dev
n1.2-dev
n1.3-dev
n2.*
n2.0
n2.1-dev
n2.2-dev
n2.3-dev
n2.4-dev
n2.5-dev
n2.6-dev
n2.7-dev
n2.8-dev
n2.9-dev
n3.*
n3.1-dev
n3.2-dev
n3.3-dev
Database specific
vanir_signatures
[
{
"signature_type": "Function",
"source": "https://github.com/ffmpeg/ffmpeg/commit/a5d25faa3f4b18dac737fdb35d0dd68eb0dc2156",
"digest": {
"function_hash": "54265455413115495931100378942446358680",
"length": 3861.0
},
"target": {
"file": "ffserver.c",
"function": "http_receive_data"
},
"id": "CVE-2016-10192-07a68142",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"source": "https://github.com/ffmpeg/ffmpeg/commit/a5d25faa3f4b18dac737fdb35d0dd68eb0dc2156",
"digest": {
"threshold": 0.9,
"line_hashes": [
"145977957621285930571316406731381407558",
"157890322922176059152627140325378154171",
"146523412843575963327062660251038354018",
"151822313249723663103132816587686774223",
"239366556133619822067036311925360021864",
"209380550422533187913911620005970241935",
"327799982023172669304573051615482912275",
"51812135191346979987597501041320814555",
"62741539207270928737374147488074395989"
]
},
"target": {
"file": "ffserver.c"
},
"id": "CVE-2016-10192-e17bdc26",
"deprecated": false,
"signature_version": "v1"
}
]
source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-10192.json"