CVE-2012-5144: Google Chrome before 23.0.1271.97, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, do not properly per...

Security readout for executives and security teams

This old vulnerability affects AAC audio decoding in Chrome and Libav. A specially crafted media file could crash the vulnerable decoder through stack memory corruption, with the CVE noting possible unspecified additional impact. The main concern is legacy software still using Chrome before 23.0.1271.97 or Libav before the fixed 0.7.7 and 0.8.5 releases. Exposure is most likely in legacy endpoints, servers, appliances, or applications that still bundle the affected Chrome or Libav versions and process AAC media from untrusted sources. Modern managed Chrome and maintained Linux distributions are less likely to remain exposed if normal updates have been applied. Treat this as a legacy exposure cleanup item unless vulnerable media-processing systems are internet-facing or handle untrusted uploads. Prioritize patching any exposed or business-critical systems still using affected Libav versions, and confirm endpoint browser management has long since eliminated the affected Chrome release. Mitigation focus: Upgrade Chrome to 23.0.1271.97 or later where applicable.; Upgrade Libav 0.7.x to 0.7.7 or later.; Upgrade Libav 0.8.x to 0.8.5 or later..

Prepared

Jun 24, 2026, 12:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.