CVE-2017-9991: Heap-based buffer overflow in the xwd_decode_frame function in libavcodec/xwddec.c in FFmpeg before 2.8.12,...

Security readout for executives and security teams

CVE-2017-9991 is a flaw in FFmpeg's XWD image decoder. A specially crafted file can crash an application using affected FFmpeg versions, and the CVE leaves open possible other unspecified impact. Business risk is highest where services automatically process user-supplied media or attachments. Exposure is likely limited to applications, appliances, pipelines, or services using vulnerable FFmpeg builds to parse XWD or broader media/image inputs, especially from untrusted users. Treat as a targeted remediation item for media-processing environments, not an internet-wide emergency based on current evidence. Update exposed FFmpeg-dependent services during the next security maintenance window, faster if they process untrusted files. Mitigation focus: Inventory FFmpeg versions embedded in applications and media-processing services.; Upgrade affected FFmpeg branches to the fixed versions or later.; Prioritize systems that process untrusted uploads, attachments, or media feeds..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.