CVE-2017-5050

—

CVSS 3.0

8.8 high

EPSS

<1%p56

Published

Apr 25, 2017 (Apr 25, 2017)

Modified

Jun 17, 2026

Description

An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.

Vendors: google
Products: chrome
Weakness: CWE-190
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.