Skip to content
Fencer Vulns
high 8.8

CVE-2016-5199 json

An off by one error resulting in an allocation of zero size in FFmpeg in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for…

published 2017-01-19 9 y ago modified 2026-06-17 4 mo ago also EUVD-2016-6150

cvss
8.8
version 3.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
1.4%
EPSS 1.4% chance of exploitation in 30 days, percentile 72%
public exploits
0
none known

Summary

An off by one error resulting in an allocation of zero size in FFmpeg in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted video file.

Patch / fix

  • ffmpeg Debian 14, Debian 13, Debian 12 7:3.2-1

debian advisories DEBIAN-CVE-2016-5199

  • oxide-qt Ubuntu 14.04 LTS 1.18.5-0ubuntu0.14.04.1
  • oxide-qt Ubuntu 16.04 LTS 1.18.5-0ubuntu0.16.04.1
  • chromium-browser Ubuntu 14.04 LTS 58.0.3029.81-0ubuntu0.14.04.1172
  • chromium-browser Ubuntu 16.04 LTS 55.0.2883.87-0ubuntu0.16.04.1263

ubuntu advisories UBUNTU-CVE-2016-5199

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • chromium-browser RHEL 6 EXTRAS 54.0.2840.100-1.el6

red hat advisories RHSA-2016:2718

  • chromium openSUSE Tumbleweed 55.0.2883.75-3.1
  • chromium openSUSE Tumbleweed 113.0.5672.92-1.1

opensuse advisories openSUSE-SU-2024:10171-1openSUSE-SU-2024:12948-1

  • ffmpeg Alpine 3.4 3.0.7-r0

alpine advisories ALPINE-CVE-2016-5199

Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2016-5199 updated cvss 8.8

chromium-browser: heap corruption in ffmpeg

  • Red Hat Enterprise Linux Desktop Supplementary (v. 6) chromium-browser 54.0.2840.100-1.el6 Red Hat Enterprise Linux Server Supplementary (v. 6) chromium-browser 54.0.2840.100-1.el6 Red Hat Enterprise Linux Workstation Supplementary (v. 6) chromium-browser 54.0.2840.100-1.el6
    fixed: vendor fix RHSA-2016:2718

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

1.38% chance of exploitation in the next 30 days, higher than 72% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.0 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NVD 2.0 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

  • n/a Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android

Classification

Weakness
  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
Technology feeds

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.