CVE-2016-10191: Heap-based buffer overflow in libavformat/rtmppkt.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x befo...

Security readout for executives and security teams

This is a memory corruption flaw in FFmpeg’s RTMP packet handling. A malicious or malformed RTMP stream could cause vulnerable FFmpeg versions to overflow heap memory, with the CVE description saying remote code execution is possible. Organizations are most exposed where FFmpeg processes untrusted media or network streams. Exposure is likely in systems that run old FFmpeg builds, especially media ingest, transcoding, preview generation, RTMP handling, or applications that bundle FFmpeg rather than using patched OS packages. Prioritize remediation for internet-facing or partner-facing media processing systems. The business risk is highest where untrusted streams can reach FFmpeg automatically, because the flaw is memory corruption with stated remote code execution impact. Mitigation focus: Upgrade FFmpeg to 2.8.10, 3.0.5, 3.1.6, 3.2.2, or later fixed releases.; Apply vendor or Linux distribution security updates for FFmpeg or Libav packages.; Inventory applications that statically bundle FFmpeg and update their embedded builds..

Prepared

Jun 13, 2026, 06:20 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.