Description
An off by one error resulting in an allocation of zero size in FFmpeg in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted video file.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android | Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | ffmpeg | 7:3.2-1 | — |
| Debian 13 | ffmpeg | 7:3.2-1 | — |
| Debian 12 | ffmpeg | 7:3.2-1 | — |
| Debian 8 | chromium-browser | 55.0.2883.75-1~deb8u1 | DSA-3731-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | chromium-browser | 55.0.2883.87-0ubuntu0.16.04.1263 | — |
| Ubuntu 16.04 LTS | oxide-qt | 1.18.5-0ubuntu0.16.04.1 | USN-3133-1 |
| Ubuntu 14.04 LTS | chromium-browser | 58.0.3029.81-0ubuntu0.14.04.1172 | — |
| Ubuntu 14.04 LTS | oxide-qt | 1.18.5-0ubuntu0.14.04.1 | USN-3133-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | chromium-browser | 54.0.2840.100-1.el6 | RHSA-2016:2718 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | chromium | 55.0.2883.75-3.1 | openSUSE-SU-2024:12948-1, openSUSE-SU-2024:10171-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.4 | ffmpeg | 3.0.7-r0 | — |
Advisories 5
- RHSA-2016:2718 Red Hat Security Advisory: chromium-browser security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- USN-3133-1 oxide-qt vulnerabilities Ubuntu Security Notices (USN) · Apr 22, 2026
- DSA-3731-1 chromium-browser - security update Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10171-1 chromedriver-55.0.2883.75-3.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:12948-1 ungoogled-chromium-113.0.5672.92-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- 1037273 vdb-entry
- GLSA-201611-16 vendor-advisory
- https://chromereleases.googleblog.com/2016/11/stable-channel-update-for-desktop_9.html
- 94196 vdb-entry
- https://crbug.com/643948
- RHSA-2016:2718 vendor-advisory