CVE-2012-2408

MEDIUM · CVSS 6.8 EPSS 1.68%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2012-09-12 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2012-2408

Severity

MEDIUM

CVSS

6.8

EPSS

1.68%

Original Filing — NVD Description

The AAC SDK in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a crafted AAC file that is not properly handled during decoding.