CVE-2012-6615: The ff_ass_split_override_codes function in libavcodec/ass_split.c in FFmpeg before 1.0.2 allows remote att...

Security readout for executives and security teams

This is an old FFmpeg denial-of-service issue. A specially malformed subtitle entry can crash vulnerable FFmpeg versions before 1.0.2. The business impact is service interruption in systems that process untrusted media or subtitles, not data theft or remote code execution based on the provided sources. Exposure is most likely where FFmpeg before 1.0.2, or software bundling that code, processes untrusted media files or ASS/SSA subtitle data. Systems that never parse user-supplied subtitles are less likely to be reachable. Treat as a targeted availability risk for media-processing workflows. Prioritize internet-facing upload, transcoding, preview, or content-ingestion systems first. This is not supported as a critical emergency by the provided evidence. Mitigation focus: Inventory FFmpeg binaries and embedded libavcodec copies.; Upgrade FFmpeg to 1.0.2 or later where applicable.; Check downstream vendor guidance for bundled FFmpeg components..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.