CVE-2017-15186: Ffmpeg

Medium severity, CVSS 6.5. EPSS: 1.7% chance of exploitation in the next 30 days.

Double free vulnerability in FFmpeg 3.3.4 and earlier allows remote attackers to cause a denial of service via a crafted AVI file.

Affected products

• Ffmpeg Ffmpeg: up to and including 3.3.4

Published 2017-10-24. Last modified 2026-06-17.