CVE-2013-0860

MEDIUM · CVSS 4.3 EPSS 2.26%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2013-11-23 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2013-0860

Severity

MEDIUM

CVSS

4.3

EPSS

2.26%

Original Filing — NVD Description

The ff_er_frame_end function in libavcodec/error_resilience.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.1 does not properly verify that a frame is fully initialized, which allows remote attackers to trigger a NULL pointer dereference via crafted picture data.