CVE-2012-0853

CVE-2012-0853 describes a denial-of-service vulnerability in the Actrac3 codec within FFmpeg and Libav, specifically in the decodeTonalComponents function. An attacker could exploit this by crafting a malicious Atrac 3 file with a large component count, leading to an infinite loop and crash, with potential for arbitrary code execution. The vulnerability has a CVSS score of 6.8, indicating a medium severity with network access, medium attack complexity, and partial impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.