AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2009-4635

HIGH · CVSS 9.3 EPSS 8.09%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2010-02-10 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 9.3. It may be remotely exploitable. It may lead to a denial-of-service condition.

CVE
CVE-2009-4635
Severity
HIGH
CVSS
9.3
EPSS
8.09%

Original NVD Description

FFmpeg 0.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted MOV container with improperly ordered tags that cause (1) mov.c and (2) utils.c to use inconsistent codec types and identifiers, leading to processing of a video-structure pointer by the mp3 decoder, and a stack-based buffer overflow.