CVE-2016-5115 is a denial-of-service issue in media parsing code associated with libavformat 57.34.103 and MPlayer. According to the supplied sources, a crafted MP3 file can trigger an out-of-bounds read in avcodec_decode_audio4, leading to service disruption rather than data modification. NVD classifies the weakness as CWE-125 and rates the issue CVSS 3.0 5.5 (Medium).
CVE-2016-4352 is a denial-of-service flaw in GIF demuxing. The supplied description says large GIF dimensions can trigger an integer overflow in libmpdemux/demux_gif.c and crash MPlayer, while NVD maps the issue to libavformat_project:libavformat and rates it as a high-availability impact bug. In practice, anyone shipping affected media parsing code should treat this as a malformed-image input bug that ca [truncated]