PT-2017-12923
CVE-2017-13135
·
Published
2017-11-16
·
Updated
2021-03-15
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
VideoLAN x265 (affected versions not specified)
libbpg version 0.9.7
Description
A NULL Pointer Dereference issue exists because the CUData::initialize function in common/cudata.cpp mishandles memory-allocation failure.
Recommendations
For libbpg version 0.9.7, consider disabling the CUData::initialize function as a temporary workaround until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾