CVE-2010-4705: Ffmpeg

High severity, CVSS 9.3. EPSS: 1.3% chance of exploitation in the next 30 days.

Integer overflow in the vorbis_residue_decode_internal function in libavcodec/vorbis_dec.c in the Vorbis decoder in FFmpeg, possibly 0.6, has unspecified impact and remote attack vectors, related to the sizes of certain integer data types. NOTE: this might overlap CVE-2011-0480.

Affected products

• Ffmpeg Ffmpeg: version 0.6 only

Published 2011-01-22. Last modified 2026-06-16.