CVE-2011-3945

CVE-2011-3945 describes a denial-of-service vulnerability, potentially leading to arbitrary code execution, in the KVG1 decoder (decode_frame function) within libavcodec. This flaw affects FFmpeg versions 0.7.x before 0.7.12 and 0.8.x before 0.8.11, as well as Libav versions 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1. The vulnerability has a CVSS score of 6.8, indicating a medium severity, and can be triggered remotely with medium attack complexity, potentially resulting in partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage regarding this CVE.