CVE-2017-9608: Ffmpeg

Medium severity, CVSS 6.5. EPSS: 4.6% chance of exploitation in the next 30 days.

The dnxhd decoder in FFmpeg before 3.2.6, and 3.3.x before 3.3.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted mov file.

Affected products

• Ffmpeg Ffmpeg: before 3.2.6 (fixed in 3.2.6); from 3.3, before 3.3.3 (fixed in 3.3.3)

Published 2017-12-27. Last modified 2026-06-17.