Input validation error in FFmpeg - CVE-2013-3670
Published: June 10, 2013 / Updated: June 8, 2025
Vulnerability identifier: #VU110607
CSH Severity: Medium
CVSS v4.0:
CVE-ID: CVE-2013-3670
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vendor: ffmpeg.sourceforge.net
Affected software:
FFmpeg
FFmpeg
Detailed vulnerability description
The vulnerability allows remote attackers to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input. A remote attacker can cause a denial of service (out-of-bounds array access and application crash) via crafted RLE data.
How to mitigate CVE-2013-3670
Install update from vendor's website.