CVE-2021-28429: Ffmpeg

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Integer overflow vulnerability in av_timecode_make_string in libavutil/timecode.c in FFmpeg version 4.3.2, allows local attackers to cause a denial of service (DoS) via crafted .mov file.

Affected products

• Ffmpeg Ffmpeg: version 4.3.2 only

Published 2023-08-11. Last modified 2026-06-17.