CVE-2011-0480: Canonical Ubuntu Linux

High severity, CVSS 9.3. EPSS: 2.5% chance of exploitation in the next 30 days.

Multiple buffer overflows in vorbis_dec.c in the Vorbis decoder in FFmpeg, as used in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344, allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted WebM file, related to buffers for (1) the channel floor and (2) the channel residue.

Affected products

• Canonical Ubuntu Linux: version 8.04 only; version 9.10 only; version 10.04 only; version 10.10 only
• Debian Debian Linux: version 6.0 only
• Google Chrome: before 8.0.552.237 (fixed in 8.0.552.237)
• Google Chrome OS: before 8.0.552.344 (fixed in 8.0.552.344)

Published 2011-01-14. Last modified 2026-06-16.