CVE-2013-0894

CVE-2013-0894 describes a buffer overflow in the Vorbis decoder within FFmpeg (specifically libavcodec's vorbis_parse_setup_hdr_floors function), affecting products like Google Chrome, Apple, Canonical, and Microsoft. This vulnerability, stemming from a zero bark map size, could lead to a denial of service (divide-by-zero or out-of-bounds array access) or potentially other unspecified impacts. With a CVSS score of 7.5, it is considered highly severe, allowing unauthenticated remote attackers to exploit it with low complexity. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog, though it has received some community discussion and media coverage.