Integer overflow in the get_len function in libavutil/lzo.c in FFmpeg before 0.10.14, 1.1.x before 1.1.12, 1.2.x before 1.2.7, 2.0.x before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.4 allows remote attackers to execute arbitrary code via a crafted Literal Run.
| Product | Vendor | Version |
|---|---|---|
| n/a | n/a | < 473aad9ad57ff760005377e6f45a2ad4210e08ce |
| n/a | n/a | < 17a58caf3863163c4a84a218a9649be2c8061443 |