CVE-2012-0847: Heap-based buffer overflow in the avfilter_filter_samples function in libavfilter/avfilter.c in FFmpeg befo...

Security readout for executives and security teams

CVE-2012-0847 is a crash vulnerability in FFmpeg before 0.9.1. A crafted media file can trigger a heap buffer overflow during audio filtering, causing applications that process the file to terminate. The cited sources support denial of service, not confirmed code execution. Exposure is most likely where legacy FFmpeg before 0.9.1 processes untrusted or user-supplied media, such as upload pipelines, transcoders, preview generators, or media analysis services. Modern maintained FFmpeg packages are unlikely to remain affected, but embedded or bundled copies need verification. Handle as a targeted legacy exposure issue. It can disrupt media-processing services, but the cited evidence supports denial of service only and no active exploitation. Prioritize systems that still run old FFmpeg builds or process external media at scale. Mitigation focus: Upgrade FFmpeg to 0.9.1 or a later maintained release.; Check vendor or distribution advisories for backported FFmpeg fixes.; Inventory applications that bundle their own FFmpeg libraries..

Prepared

Jun 28, 2026, 00:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.