CVE detail
CVE-2009-4637 — CVE-2009-4637
Published 2010-02-10 · Modified 2026-06-16 · Vendor ffmpeg · Product ffmpeg · Source nvd
UNKNOWN
severity
CVSS-derived band
0.1704
EPSS probability
exploitation probability, 30d
97.0%
EPSS percentile
percentile vs all CVEs
NOT LISTED
CISA KEV
known exploited catalog
Description
FFmpeg 0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors that trigger a stack-based buffer overflow.
Remediation
No vendor-published fix data in our corpus for this CVE. Check the references below or the vendor's PSIRT / security advisories page.
References