CVE-2009-4631

HIGH · CVSS 9.3 EPSS 5.10%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2010-02-10 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2009-4631

Severity

HIGH

CVSS

9.3

EPSS

5.10%

Original NVD Description

Off-by-one error in the VP3 decoder (vp3.c) in FFmpeg 0.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted VP3 file that triggers an out-of-bounds read and possibly memory corruption.