CVE-2011-3951

CVE-2011-3951 describes a denial-of-service vulnerability in the dpcm_decode_frame function within FFmpeg and Libav, affecting versions prior to 0.10 and various 0.5.x, 0.6.x, 0.7.x, and 0.8.x releases respectively. An attacker could trigger an application crash and potentially execute arbitrary code by providing a specially crafted stereo media file. With a CVSS score of 6.8, this vulnerability is considered medium severity, requiring medium attack complexity (AC:M) and potentially leading to partial confidentiality, integrity, and availability impacts (C:P/I:P/A:P). There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.