CVE-2017-5037

CVE-2017-5037 describes an integer overflow vulnerability in FFmpeg, specifically within the ChunkDemuxer component, affecting Google Chrome versions prior to 57.0.2987.98 on desktop platforms and 57.0.2987.108 on Android. This flaw allows a remote attacker to achieve an out-of-bounds memory write by enticing a user to open a specially crafted video file. With a CVSS score of 7.8 (HIGH), the vulnerability has a high impact on confidentiality, integrity, and availability, requiring user interaction but with low attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog, though it garnered some community discussion and media coverage at the time of disclosure.