CVE-2011-4031: Ffmpeg

Medium severity, CVSS 6.8. EPSS: 2.3% chance of exploitation in the next 30 days.

Integer underflow in the asfrtp_parse_packet function in libavformat/rtpdec_asf.c in FFmpeg before 0.8.3 allows remote attackers to execute arbitrary code via a crafted ASF packet.

Affected products

• Ffmpeg Ffmpeg: before 0.8.3 (fixed in 0.8.3)

Published 2012-05-09. Last modified 2026-06-16.