CVE-2012-0947

CVE-2012-0947 describes a heap-based buffer overflow in the VQA codec within Libav versions 0.5.x, 0.6.x, 0.7.x, and 0.8.x. This vulnerability, triggered by a crafted VQA media file where the image size isn't a multiple of the block size, allows remote attackers to cause a denial of service (crash) and potentially execute arbitrary code. With a CVSS score of 6.8, it is considered medium severity, requiring medium attack complexity but no authentication. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.