CVE-2011-4352

CVE-2011-4352 describes an integer overflow in the vp3_dequant function within the VP3 decoder of FFmpeg and Libav, affecting various versions. This vulnerability allows remote attackers to trigger a denial of service (crash) and potentially execute arbitrary code by providing a specially crafted VP3 stream. With a CVSS score of 6.8, it is rated as medium severity, indicating that an attacker could exploit this remotely with medium attack complexity, leading to partial impacts on confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, suggesting it is not a widely targeted or discussed vulnerability.