CVE-2008-3162: Stack-based buffer overflow in the str_read_packet function in libavformat/psxstr.c in FFmpeg before r13993...

Security readout for executives and security teams

CVE-2008-3162 is a memory corruption flaw in FFmpeg's STR media parser. A malicious STR file could crash a vulnerable application and may allow code execution when the file is processed. Business urgency depends on whether legacy FFmpeg/libavformat handles untrusted media. Exposure is most likely in legacy systems, appliances, or media-processing pipelines using FFmpeg/libavformat before r13993, especially where users or external partners can submit media files. The supplied affected-product metadata is incomplete. Prioritize remediation where FFmpeg processes externally supplied media. For systems with no STR handling or no untrusted media intake, urgency is lower but inventory still matters because FFmpeg is commonly embedded. Mitigation focus: Upgrade FFmpeg/libavformat to a build containing the r13993 fix or later.; Apply supported distro security updates from Ubuntu, Debian, Gentoo, Mandriva, or your vendor.; Restrict processing of untrusted STR media on legacy systems until patched..

Prepared

Jun 28, 2026, 18:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.