CVE-2017-14181

2017-09-0716:00:00

mitre

www.cve.org

cve-2017-14181

deletebitbuffer

libbitbuf/bitbuffer.c

mp4tools aacplusenc 0.17.5

denial of service

invalid memory write

segv

application crash

.wav file

null pointer dereference

EPSS

0.004

Percentile

72.7%

JSON

DeleteBitBuffer in libbitbuf/bitbuffer.c in mp4tools aacplusenc 0.17.5 allows remote attackers to cause a denial of service (invalid memory write, SEGV on unknown address 0x000000000030, and application crash) or possibly have unspecified other impact via a crafted .wav file, aka a NULL pointer dereference.