CVE-2013-0874: The (1) doubles2str and (2) shorts2str functions in libavcodec/tiff.c in FFmpeg before 1.1.3 allow remote a...

Security readout for executives and security teams

CVE-2013-0874 is an old FFmpeg TIFF parsing flaw. A specially crafted TIFF image can trigger out-of-bounds array access in libavcodec. The public record says the impact is unspecified, so urgency depends on whether older FFmpeg versions process untrusted images in your environment. Exposure is most likely in media-processing services, upload pipelines, desktop tools, or embedded products using FFmpeg before 1.1.3 to decode TIFF images from untrusted sources. Prioritize as dependency remediation where untrusted media is processed. This is not KEV-listed in the provided evidence, but old media parser flaws can affect externally exposed workflows. Mitigation focus: Upgrade FFmpeg/libavcodec to 1.1.3 or a vendor-maintained fixed package.; Check downstream OS or appliance vendor advisories for backported fixes.; Restrict untrusted TIFF processing until vulnerable FFmpeg builds are removed..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.