CVE-2011-3504

CRITICAL 9.3CVE-2011-3504 · Published 29/09/2011 · updated 16/06/2026

In short

CVE-2011-3504 is a CRITICAL (CVSS 9.3) vulnerability affecting ffmpeg (ffmpeg).
Chance of exploitation in the next 30 days (EPSS): 5.9%, higher than 93.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ffmpeg ffmpeg	`= 0.3= 0.3.1= 0.3.2= 0.3.3= 0.3.4= 0.4.0= 0.4.2= 0.4.3= 0.4.4= 0.4.5= 0.4.6= 0.4.7= 0.4.8= 0.4.9= 0.5= 0.5.1= 0.5.2= 0.5.3= 0.5.4= 0.6= 0.6.1= 0.6.2≤ 0.8.0`	No fix yet

Description

The Matroska format decoder in FFmpeg before 0.8.3 does not properly allocate memory, which allows remote attackers to execute arbitrary code via a crafted file.

References

More vulnerabilities in ffmpeg

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

ffmpeg

= 0.3= 0.3.1= 0.3.2= 0.3.3= 0.3.4= 0.4.0= 0.4.2= 0.4.3= 0.4.4= 0.4.5= 0.4.6= 0.4.7= 0.4.8= 0.4.9= 0.5= 0.5.1= 0.5.2= 0.5.3= 0.5.4= 0.6= 0.6.1= 0.6.2≤ 0.8.0

No fix yet

More vulnerabilities in ffmpeg

See all →