CVE-2015-1207: Debian Linux

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

Double-free vulnerability in libavformat/mov.c in FFMPEG in Google Chrome 41.0.2251.0 allows remote attackers to cause a denial of service (memory corruption and crash) via a crafted .m4a file.

Affected products

  • Debian Debian Linux: version 8.0 only
  • Google Chrome: version 41.0.2251.0 only

Published 2017-06-06. Last modified 2026-06-17.