CVE-2013-0862

CVE-2013-0862 describes multiple integer overflows in the process_frame_obj function within FFmpeg's libavcodec/sanm.c, affecting versions prior to 1.1.2. This vulnerability allows remote attackers to trigger an out-of-bounds array access by providing crafted image dimensions in LucasArts Smush video data, leading to an unspecified but potentially severe impact. With a CVSS score of 9.3, it is considered critical, indicating a network-based attack with medium complexity that can result in complete compromise of confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.