Libav Invalid Memory Access Vulnerability

Libav is an open source audio and video processing tools , providing for conversion , manipulation and streaming of various multimedia formats and protocols cross-platform tools and libraries . An invalid memory access vulnerability exists in vc1decodefram in libavcodec/vc1dec.c in Libav 12.3,...

CVE-2018-19128

In Libav 12.3, there is a heap-based buffer over-read in decodeframe in libavcodec/lcldec.c that allows an attacker to cause denial-of-service via a crafted avi file...

CVE-2018-19129

In Libav 12.3, a NULL pointer dereference RIP points to zero issue in ffmpasynthfilterfloat in libavcodec/mpegaudiodsptemplate.c can cause a segmentation fault application crash via a crafted mov file...

CVE-2018-19128

In Libav 12.3, there is a heap-based buffer over-read in decodeframe in libavcodec/lcldec.c that allows an attacker to cause denial-of-service via a crafted avi file...

CVE-2018-19130

In Libav 12.3, there is an invalid memory access in vc1decodeframe in libavcodec/vc1dec.c that allows attackers to cause a denial-of-service via a crafted aac file. NOTE: This may be a duplicate of CVE-2017-17127...

CVE-2018-19129

In Libav 12.3, a NULL pointer dereference RIP points to zero issue in ffmpasynthfilterfloat in libavcodec/mpegaudiodsptemplate.c can cause a segmentation fault application crash via a crafted mov file...

CVE-2018-19130

In Libav 12.3, there is an invalid memory access in vc1decodeframe in libavcodec/vc1dec.c that allows attackers to cause a denial-of-service via a crafted aac file. NOTE: This may be a duplicate of CVE-2017-17127...

CVE-2018-19128

In Libav 12.3, there is a heap-based buffer over-read in decodeframe in libavcodec/lcldec.c that allows an attacker to cause denial-of-service via a crafted avi file...

CVE-2018-19129

In Libav 12.3, a NULL pointer dereference RIP points to zero issue in ffmpasynthfilterfloat in libavcodec/mpegaudiodsptemplate.c can cause a segmentation fault application crash via a crafted mov file...

UBUNTU-CVE-2018-19128

In Libav 12.3, there is a heap-based buffer over-read in decodeframe in libavcodec/lcldec.c that allows an attacker to cause denial-of-service via a crafted avi file...

Heap overflow

In Libav 12.3, there is a heap-based buffer over-read in decodeframe in libavcodec/lcldec.c that allows an attacker to cause denial-of-service via a crafted avi file...

Null pointer dereference

In Libav 12.3, a NULL pointer dereference RIP points to zero issue in ffmpasynthfilterfloat in libavcodec/mpegaudiodsptemplate.c can cause a segmentation fault application crash via a crafted mov file...

UBUNTU-CVE-2018-19129

In Libav 12.3, a NULL pointer dereference RIP points to zero issue in ffmpasynthfilterfloat in libavcodec/mpegaudiodsptemplate.c can cause a segmentation fault application crash via a crafted mov file...

CVE-2018-19130

In Libav 12.3, there is an invalid memory access in vc1decodeframe in libavcodec/vc1dec.c that allows attackers to cause a denial-of-service via a crafted aac file. NOTE: This may be a duplicate of CVE-2017-17127...

Design/Logic Flaw

DISPUTED In Libav 12.3, there is an invalid memory access in vc1decodeframe in libavcodec/vc1dec.c that allows attackers to cause a denial-of-service via a crafted aac file. NOTE: This may be a duplicate of CVE-2017-17127...

UBUNTU-CVE-2018-19130

DISPUTED In Libav 12.3, there is an invalid memory access in vc1decodeframe in libavcodec/vc1dec.c that allows attackers to cause a denial-of-service via a crafted aac file. NOTE: This may be a duplicate of CVE-2017-17127...

CVE-2018-19130

In Libav 12.3, there is an invalid memory access in vc1decodeframe in libavcodec/vc1dec.c that allows attackers to cause a denial-of-service via a crafted aac file. NOTE: This may be a duplicate of CVE-2017-17127...

CVE-2018-19130

CVE-2018-19130 corresponds to an invalid memory access in Libav 12.3’s vc1_decode_frame function (libavcodec/vc1dec.c) that can cause denial-of-service via a crafted AAC file. Connected sources (e.g., Debian DLA-2021-1 and CNVD CNVD-2019-09086) identify CVE-2018-19130 as a duplicate of CVE-2017-1...

CVE-2018-19128

In Libav 12.3, there is a heap-based buffer over-read in decodeframe in libavcodec/lcldec.c that allows an attacker to cause denial-of-service via a crafted avi file...

CVE-2018-19128

CVE-2018-19128 describes a heap-based buffer over-read in Libav 12.3, specifically in decode_frame (libavcodec/lcldec.c), enabling denial-of-service via a crafted AVI file. The connected sources consistently identify the affected component as Libav’s libavcodec/lcldec.c and confirm the vulnerabil...