PT-2018-14677
CVE-2018-18829
·
Published
2018-10-30
·
Updated
2018-12-06
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Libav version 12.3
Description
A NULL pointer dereference exists in the
ff vc1 parse frame header adv function in vc1.c, which can be exploited by attackers to cause a denial-of-service through a crafted file.Recommendations
For Libav version 12.3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾