CVE-2016-10191

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Heap-based buffer overflow in libavformat/rtmppkt.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure to check for RTMP packet size mismatches.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.openwall.com/lists/oss-security/2017/01/31/12Mailing List, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/02/02/1Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/bid/95989
https://ffmpeg.org/security.htmlRelease Notes, Vendor Advisory
https://github.com/FFmpeg/FFmpeg/commit/7d57ca4d9a75562fa32e40766211de150f8b3ee7Patch
https://lists.debian.org/debian-lts-announce/2018/12/msg00009.html
http://www.openwall.com/lists/oss-security/2017/01/31/12Mailing List, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/02/02/1Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/bid/95989
https://ffmpeg.org/security.htmlRelease Notes, Vendor Advisory
https://github.com/FFmpeg/FFmpeg/commit/7d57ca4d9a75562fa32e40766211de150f8b3ee7Patch
https://lists.debian.org/debian-lts-announce/2018/12/msg00009.html

Timeline

Published: Feb 9, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-101929.8Heap-based buffer overflow in ffserver.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remo CVE-2016-101939.8The espeak-ruby gem before 1.0.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a string to the CVE-2016-101949.8The festivaltts4r gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a string to the (1) to_spee CVE-2016-101959.8The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving th CVE-2016-101967.5Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a CVE-2016-101977.5The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (out-of-bounds read) via CVE-2016-101985.5The gst_aac_parse_sink_setcaps function in gst/audioparsers/gstaacparse.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attac CVE-2016-101997.5The qtdemux_tag_add_str_full function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to caus CVE-2016-10208.8Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows att CVE-2016-102007.0Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows local users to gain privileges or cause a den CVE-2016-102016.1Cross-site scripting (XSS) vulnerability in Zoneminder 1.30 and earlier allows remote attackers to inject arbitrary web script or HTML via t CVE-2016-102026.1Cross-site scripting (XSS) vulnerability in Zoneminder 1.30 and earlier allows remote attackers to inject arbitrary web script or HTML via t