Input validation error in FFmpeg - CVE-2013-3670
Published: June 10, 2013 / Updated: June 8, 2025
Vulnerability identifier: #VU110607
CSH Severity: Medium
CVSS v4: []
CVE-ID: CVE-2013-3670
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows remote attackers to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input. A remote attacker can cause a denial of service (out-of-bounds array access and application crash) via crafted RLE data.
Affected software
FFmpeg
How to mitigate CVE-2013-3670
Install update from vendor's website.