CVE Database
/

CVE-2016-5199

Back to search

CVE-2016-5199

Published: Jan 19, 2017

Modified: Aug 6, 2024

PUBLISHED

Description

An off by one error resulting in an allocation of zero size in FFmpeg in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted video file.

VendorProductVersions

n/a

Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android

affected
Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android

References

1037273
vdb-entry
x_refsource_SECTRACK
GLSA-201611-16
vendor-advisory
x_refsource_GENTOO
94196
vdb-entry
x_refsource_BID
https://crbug.com/643948
x_refsource_CONFIRM
RHSA-2016:2718
vendor-advisory
x_refsource_REDHAT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now