CVE-2011-4364

CVE-2011-4364 describes a buffer overflow vulnerability in the Sierra VMD decoder within FFmpeg and Libav, affecting various versions of both libraries. This flaw allows remote attackers to trigger a denial of service (crash) and potentially execute arbitrary code by supplying a specially crafted VMD file. The vulnerability has a CVSS score of 6.8, indicating a medium severity, with a network attack vector and medium attack complexity, potentially leading to partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.