CVE-2013-0878: The advance_line function in libavcodec/targa.c in FFmpeg before 1.1.3 allows remote attackers to have an u...

Security readout for executives and security teams

This issue affects old FFmpeg Targa image handling. A maliciously crafted Targa image could trigger out-of-bounds array access, with the public CVE describing the impact only as unspecified. Business urgency depends on whether any systems still use FFmpeg before 1.1.3 to process untrusted images. Exposure is most likely in legacy servers, desktop tools, batch pipelines, or bundled products using FFmpeg before 1.1.3 and accepting Targa images from users or external sources. Set priority based on exposure. Internet-facing or partner-facing image processing with old FFmpeg should be remediated promptly. Environments without Targa processing or without legacy FFmpeg can treat this as vulnerability management cleanup. Mitigation focus: Upgrade FFmpeg to version 1.1.3 or a vendor-supported fixed build.; Apply distribution security updates where FFmpeg is supplied by the operating system.; Inventory products that bundle FFmpeg instead of using system packages..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.