CVE-2016-7424: Debian Linux

Medium severity, CVSS 5.5. EPSS: 1.5% chance of exploitation in the next 30 days.

The put_no_rnd_pixels8_xy2_mmx function in x86/rnd_template.c in libav 11.7 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted MP3 file.

Affected products

• Debian Debian Linux: version 8.0 only
• Libav Libav: up to and including 11.7

Published 2016-10-07. Last modified 2026-06-17.