CVE-2018-19130

Name of the Vulnerable Software and Affected Versions Libav version 12.3

Description The issue is related to an invalid memory access in the vc1 decode frame function in libavcodec/vc1dec.c, which can be exploited by attackers to cause a denial-of-service via a crafted aac file.

Recommendations For Libav version 12.3, consider applying a patch or fix to resolve the invalid memory access issue in the vc1 decode frame function. As a temporary workaround, restrict the processing of crafted aac files to minimize the risk of exploitation.