Approved changes feed: RSS · Atom

cpe:2.3:a:libav:libav:12.1:*:*:*:*:*:*:*

part: a version: 12.1 update: *

VendorLibav (813c8cbe-675d-5850-8eef-95f346ccf92f)
ProductLibav (5622b9ed-3e75-5407-8971-c668b118732d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libav-tools purl2cpe 2026-06-01 10:14:37.827984
pkg:github/libav/libav purl2cpe 2026-06-01 10:14:37.827985

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-9987 vulnerable 2026-06-08 05:10:20.199479 Details available
There is a heap-based buffer overflow in the function hpel_motion in mpegvideo_motion.c in libav 12.1. A crafted input can lead to a remote denial of service attack.
Published: 2017-06-28T06:00:00.000Z
Updated: 2024-08-05T17:25:00.535Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16803 vulnerable 2026-06-08 05:09:01.082255 Details available
In Libav through 11.11 and 12.x through 12.1, the smacker_decode_tree function in libavcodec/smacker.c does not properly restrict tree recursion, which allows remote attackers to cause a denial of service (bitstream.c:build_table() out-of-bounds read and application crash) via a crafted Smacker stream.
Published: 2017-11-13T17:00:00.000Z
Updated: 2024-08-05T20:35:21.014Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11684 vulnerable 2026-06-08 05:08:38.329644 Details available
There is an illegal address access in the build_table function in libavcodec/bitstream.c of Libav 12.1 that will lead to remote denial of service via crafted input.
Published: 2017-07-27T06:00:00.000Z
Updated: 2024-08-05T18:19:37.718Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.