CVE-2016-7502

HIGH · CVSS 7.8 EPSS 1.38%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2016-12-23 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2016-7502

Severity

HIGH

CVSS

7.8

EPSS

1.38%

Original Filing — NVD Description

The cavs_idct8_add_c function in libavcodec/cavsdsp.c in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when decoding with cavs_decode.