CVE-2012-0858

CVE-2012-0858 describes a denial-of-service vulnerability in the Shorten codec within FFmpeg and Libav, affecting versions 0.7.x and 0.8.x of FFmpeg, and various 0.5.x, 0.6.x, 0.7.x, and 0.8.x versions of Libav. This flaw, categorized as an "invalid free" (CWE-399), allows remote attackers to crash an application and potentially execute arbitrary code by supplying a specially crafted Shorten file. With a CVSS score of 6.8, it is considered a medium-severity vulnerability, requiring moderate attack complexity but no authentication, and can lead to partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.