CVE-2013-0862: Multiple integer overflows in the process_frame_obj function in libavcodec/sanm.c in FFmpeg before 1.1.2 al...

Security readout for executives and security teams

CVE-2013-0862 is an FFmpeg media-parsing flaw. A malicious LucasArts Smush video file with crafted image dimensions could trigger memory access outside expected bounds. Business urgency depends on whether your systems process untrusted media with affected FFmpeg versions before 1.1.2. Most likely exposure is servers, desktop tools, or embedded products that use FFmpeg/libavcodec to decode user-supplied or externally sourced video files, especially legacy builds before 1.1.2 or distribution packages lacking the fix. Prioritize remediation where FFmpeg processes external uploads, email attachments, customer media, or automated content feeds. Legacy internal-only tooling is lower urgency but should still be updated during normal vulnerability maintenance. Mitigation focus: Upgrade FFmpeg to 1.1.2 or a vendor-supported fixed package.; Check distribution advisories for backported fixes before relying on version strings alone.; Reduce or isolate processing of untrusted video files until fixed..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.