CVE-2013-2277

CVE-2013-2277 describes an out-of-bounds array access vulnerability in the ff_h264_decode_seq_parameter_set function within libavcodec in FFmpeg versions prior to 1.1.3. This flaw, stemming from a lack of validation between luma and chroma depth, allows remote attackers to trigger a denial of service (application crash) or potentially other unspecified impacts via specially crafted H.264 data. With a CVSS score of 7.5, it is considered high severity, requiring no authentication or complex attack vectors. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.