CVE-2013-0873: The read_header function in libavcodec/shorten.c in FFmpeg before 1.1.3 allows remote attackers to have an...

Security readout for executives and security teams

This is an old FFmpeg vulnerability in handling Shorten audio headers. A crafted media file with an invalid channel count could trigger invalid memory freeing. The public record does not define the final impact, so treat it as risky wherever untrusted media is processed by legacy FFmpeg builds. Exposure is most likely in systems using FFmpeg before 1.1.3 to parse untrusted media, including upload processors, transcoders, preview generators, and bundled application libraries. Modern supported distributions are less likely exposed, but embedded or pinned FFmpeg copies require verification. Prioritize if the organization processes user-supplied media with old or embedded FFmpeg. The age of the issue lowers urgency for fully patched platforms, but legacy media pipelines can preserve this risk for years. Mitigation focus: Upgrade FFmpeg or vendor packages to a fixed supported version.; Check distribution advisories for backported FFmpeg security fixes.; Identify and replace bundled or statically linked legacy FFmpeg copies..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.