CVE-2018-18826

There exists a heap-based buffer overflow in vc1decodepmbintfi in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...

CVE-2018-18827

There exists a heap-based buffer over-read in ffvc1preddc in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...

CVE-2018-18828

There exists a heap-based buffer overflow in vc1decodeiblockadv in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...

CVE-2018-18829

There exists a NULL pointer dereference in ffvc1parseframeheaderadv in vc1.c in Libav 12.3, which allows attackers to cause a denial-of-service through a crafted aac file...

Heap overflow

There exists a heap-based buffer overflow in vc1decodepmbintfi in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...

CVE-2018-18828

There exists a heap-based buffer overflow in vc1decodeiblockadv in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...

CVE-2018-18827

There exists a heap-based buffer over-read in ffvc1preddc in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...

CVE-2018-18826

There exists a heap-based buffer overflow in vc1decodepmbintfi in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...

CVE-2018-18826

There exists a heap-based buffer overflow in vc1decodepmbintfi in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...

CVE-2018-18827

There exists a heap-based buffer over-read in ffvc1preddc in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...

CVE-2018-18828

There exists a heap-based buffer overflow in vc1decodeiblockadv in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...

CVE-2018-18827

CVE-2018-18827 affects Libav 12.3: a heap-based buffer over-read in ff_vc1_pred_dc (vc1_block.c) can cause denial of service via a crafted AAC file. Affected component is Libav’s video decoding path; no explicit exploit details or vendor patch information are provided in the connected documents. ...

CVE-2018-18829

CVE-2018-18829 describes a NULL pointer dereference in Libav 12.3, specifically in ff_vc1_parse_frame_header_adv (vc1.c). The underlying issue can cause a denial-of-service when parsing a crafted AAC file. The vulnerability affects Libav’s vc1 decoder path as implemented in that version. There is...

CVE-2018-18827

There exists a heap-based buffer over-read in ffvc1preddc in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...

CVE-2018-18828

There exists a heap-based buffer overflow in vc1decodeiblockadv in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...

CVE-2018-18829

There exists a NULL pointer dereference in ffvc1parseframeheaderadv in vc1.c in Libav 12.3, which allows attackers to cause a denial-of-service through a crafted aac file...

CVE-2018-18826

There exists a heap-based buffer overflow in vc1decodepmbintfi in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...

PT-2018-14675

Name of the Vulnerable Software and Affected Versions Libav version 12.3 Description A heap-based buffer over-read exists in the ff vc1 pred dc function in vc1 block.c, which can be exploited by attackers to cause a denial-of-service via a crafted aac file. Recommendations For Libav version 12.3,...

PT-2018-14674

Name of the Vulnerable Software and Affected Versions Libav version 12.3 Description A heap-based buffer overflow exists in the vc1 decode p mb intfi function in vc1 block.c, which can be exploited by attackers to cause a denial-of-service via a crafted aac file. Recommendations For Libav version...

CVE-2018-18829: NULL Pointer Dereference

There exists a NULL pointer dereference in ffvc1parseframeheaderadv in vc1.c in Libav 12.3, which allows attackers to cause a denial-of-service through a crafted aac file...