CVE-2016-10192
- Source
- https://cve.org/CVERecord?id=CVE-2016-10192
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-10192.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2016-10192
- Downstream
ALPINE (1)
CGA (8)
DEBIAN (1)
MGASA (1)
openSUSE (2)
UBUNTU (1)
- Related
- Published
- 2017-02-09T15:59:00Z
- Modified
- 2026-10-20T13:13:09Z
- Severity
-
- 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
Heap-based buffer overflow in ffserver.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure to check chunk size.
- References
Affected packages
Git / git.ffmpeg.org/ffmpeg.git
Affected ranges
- Type
- GIT
- Repo
- https://git.ffmpeg.org/ffmpeg.git
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroducedLast Affected
- Database specific
-
Show details
{ "extracted_events": [ { "cpe": "cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*", "range": [ { "introduced": "0" }, { "last_affected": "2.8.9" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:ffmpeg:ffmpeg:3.0:*:*:*:*:*:*:*", "range": [ { "introduced": "3.0" }, { "last_affected": "3.0" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:ffmpeg:ffmpeg:3.0.1:*:*:*:*:*:*:*", "range": [ { "introduced": "3.0.1" }, { "last_affected": "3.0.1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:ffmpeg:ffmpeg:3.0.2:*:*:*:*:*:*:*", "range": [ { "introduced": "3.0.2" }, { "last_affected": "3.0.2" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:ffmpeg:ffmpeg:3.0.3:*:*:*:*:*:*:*", "range": [ { "introduced": "3.0.3" }, { "last_affected": "3.0.3" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:ffmpeg:ffmpeg:3.0.4:*:*:*:*:*:*:*", "range": [ { "introduced": "3.0.4" }, { "last_affected": "3.0.4" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:ffmpeg:ffmpeg:3.1:*:*:*:*:*:*:*", "range": [ { "introduced": "3.1" }, { "last_affected": "3.1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:ffmpeg:ffmpeg:3.1.1:*:*:*:*:*:*:*", "range": [ { "introduced": "3.1.1" }, { "last_affected": "3.1.1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:ffmpeg:ffmpeg:3.1.2:*:*:*:*:*:*:*", "range": [ { "introduced": "3.1.2" }, { "last_affected": "3.1.2" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:ffmpeg:ffmpeg:3.1.3:*:*:*:*:*:*:*", "range": [ { "introduced": "3.1.3" }, { "last_affected": "3.1.3" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:ffmpeg:ffmpeg:3.1.4:*:*:*:*:*:*:*", "range": [ { "introduced": "3.1.4" }, { "last_affected": "3.1.4" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:ffmpeg:ffmpeg:3.1.5:*:*:*:*:*:*:*", "range": [ { "introduced": "3.1.5" }, { "last_affected": "3.1.5" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:ffmpeg:ffmpeg:3.2:*:*:*:*:*:*:*", "range": [ { "introduced": "3.2" }, { "last_affected": "3.2" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:ffmpeg:ffmpeg:3.2.1:*:*:*:*:*:*:*", "range": [ { "introduced": "3.2.1" }, { "last_affected": "3.2.1" } ], "source": "CPE_STRING" } ] }
Affected versions
3.*
3.0
3.0.1
3.0.2
3.0.3
3.0.4
3.1
3.1.1
3.1.2
3.1.3
3.1.4
3.1.5
3.2
3.2.1
Other
N
n0.*
n0.11-dev
n0.12-dev
n0.8
n1.*
n1.1-dev
n1.2-dev
n1.3-dev
n2.*
n2.0
n2.1-dev
n2.2-dev
n2.3-dev
n2.4-dev
n2.5-dev
n2.6-dev
n2.7-dev
n2.8
n2.8-dev
n2.8.1
n2.8.2
n2.8.3
n2.8.4
n2.8.5
n2.8.6
n2.8.7
n2.8.8
n2.8.9
n2.9-dev
n3.*
n3.1-dev
n3.2
n3.2-dev
n3.2.1
Git / github.com/ffmpeg/ffmpeg
Affected ranges
- Type
- GIT
- Repo
- https://github.com/ffmpeg/ffmpeg
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroducedLast AffectedFixed
- Database specific
-
Show details
{ "extracted_events": [ { "cpe": "cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*", "range": [ { "introduced": "0" }, { "last_affected": "2.8.9" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:ffmpeg:ffmpeg:3.0:*:*:*:*:*:*:*", "range": [ { "introduced": "3.0" }, { "last_affected": "3.0" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:ffmpeg:ffmpeg:3.0.1:*:*:*:*:*:*:*", "range": [ { "introduced": "3.0.1" }, { "last_affected": "3.0.1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:ffmpeg:ffmpeg:3.0.2:*:*:*:*:*:*:*", "range": [ { "introduced": "3.0.2" }, { "last_affected": "3.0.2" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:ffmpeg:ffmpeg:3.0.3:*:*:*:*:*:*:*", "range": [ { "introduced": "3.0.3" }, { "last_affected": "3.0.3" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:ffmpeg:ffmpeg:3.0.4:*:*:*:*:*:*:*", "range": [ { "introduced": "3.0.4" }, { "last_affected": "3.0.4" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:ffmpeg:ffmpeg:3.1:*:*:*:*:*:*:*", "range": [ { "introduced": "3.1" }, { "last_affected": "3.1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:ffmpeg:ffmpeg:3.1.1:*:*:*:*:*:*:*", "range": [ { "introduced": "3.1.1" }, { "last_affected": "3.1.1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:ffmpeg:ffmpeg:3.1.2:*:*:*:*:*:*:*", "range": [ { "introduced": "3.1.2" }, { "last_affected": "3.1.2" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:ffmpeg:ffmpeg:3.1.3:*:*:*:*:*:*:*", "range": [ { "introduced": "3.1.3" }, { "last_affected": "3.1.3" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:ffmpeg:ffmpeg:3.1.4:*:*:*:*:*:*:*", "range": [ { "introduced": "3.1.4" }, { "last_affected": "3.1.4" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:ffmpeg:ffmpeg:3.1.5:*:*:*:*:*:*:*", "range": [ { "introduced": "3.1.5" }, { "last_affected": "3.1.5" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:ffmpeg:ffmpeg:3.2:*:*:*:*:*:*:*", "range": [ { "introduced": "3.2" }, { "last_affected": "3.2" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:ffmpeg:ffmpeg:3.2.1:*:*:*:*:*:*:*", "range": [ { "introduced": "3.2.1" }, { "last_affected": "3.2.1" } ], "source": "CPE_STRING" }, { "range": [ { "fixed": "a5d25faa3f4b18dac737fdb35d0dd68eb0dc2156" } ], "source": "REFERENCES_COMMIT" } ] }
Affected versions
3.*
3.0
3.0.1
3.0.2
3.0.3
3.0.4
3.1
3.1.1
3.1.2
3.1.3
3.1.4
3.1.5
3.2
3.2.1
Other
N
n0.*
n0.11-dev
n0.12-dev
n0.8
n1.*
n1.1-dev
n1.2-dev
n1.3-dev
n2.*
n2.0
n2.1-dev
n2.2-dev
n2.3-dev
n2.4-dev
n2.5-dev
n2.6-dev
n2.7-dev
n2.8
n2.8-dev
n2.8.1
n2.8.2
n2.8.3
n2.8.4
n2.8.5
n2.8.6
n2.8.7
n2.8.8
n2.8.9
n2.9-dev
n3.*
n3.1-dev
n3.2
n3.2-dev
n3.2.1
n3.3-dev
Database specific
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-10192.json"
vanir_signatures
[
{
"deprecated": false,
"digest": {
"function_hash": "54265455413115495931100378942446358680",
"length": 3861
},
"id": "CVE-2016-10192-07a68142",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/ffmpeg/ffmpeg/commit/a5d25faa3f4b18dac737fdb35d0dd68eb0dc2156",
"target": {
"file": "ffserver.c",
"function": "http_receive_data"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"145977957621285930571316406731381407558",
"157890322922176059152627140325378154171",
"146523412843575963327062660251038354018",
"151822313249723663103132816587686774223",
"239366556133619822067036311925360021864",
"209380550422533187913911620005970241935",
"327799982023172669304573051615482912275",
"51812135191346979987597501041320814555",
"62741539207270928737374147488074395989"
],
"threshold": 0.9
},
"id": "CVE-2016-10192-e17bdc26",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/ffmpeg/ffmpeg/commit/a5d25faa3f4b18dac737fdb35d0dd68eb0dc2156",
"target": {
"file": "ffserver.c"
}
}
]
vanir_signatures_modified
"2026-10-20T13:13:09Z"