1357 matches found
CVE-2018-18829
There exists a NULL pointer dereference in ffvc1parseframeheaderadv in vc1.c in Libav 12.3, which allows attackers to cause a denial-of-service through a crafted aac file...
CVE-2018-18826
There exists a heap-based buffer overflow in vc1decodepmbintfi in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...
CVE-2018-18828
There is a heap-based buffer overflow in Libav 12.3 (vc1_decode_i_block_adv in vc1_block.c) that can cause denial-of-service when processing a crafted AAC file. The vulnerability affects Libav’s vc1_block.c component and is documented under CVE-2018-18828. No public exploitation details are provi...
CVE-2018-18829
CVE-2018-18829 describes a NULL pointer dereference in Libav 12.3, specifically in ff_vc1_parse_frame_header_adv (vc1.c). The underlying issue can cause a denial-of-service when parsing a crafted AAC file. The vulnerability affects Libav’s vc1 decoder path as implemented in that version. There is...
CVE-2018-18827
CVE-2018-18827 affects Libav 12.3: a heap-based buffer over-read in ff_vc1_pred_dc (vc1_block.c) can cause denial of service via a crafted AAC file. Affected component is Libav’s video decoding path; no explicit exploit details or vendor patch information are provided in the connected documents. ...
CVE-2018-18826
CVE-2018-18826 describes a heap-based buffer overflow in Libav 12.3, specifically in the vc1_decode_p_mb_intfi function of vc1_block.c. The vulnerability allows an attacker to cause a denial-of-service by feeding a specially crafted AAC file. The connected documents confirm the affected component...
CVE-2018-18827
There exists a heap-based buffer over-read in ffvc1preddc in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...
CVE-2018-18827
There exists a heap-based buffer over-read in ffvc1preddc in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...
CVE-2018-18828
There exists a heap-based buffer overflow in vc1decodeiblockadv in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...
PT-2018-14676
Name of the Vulnerable Software and Affected Versions Libav version 12.3 Description A heap-based buffer overflow exists in the vc1 decode i block adv function in vc1 block.c, which can be exploited by attackers to cause a denial-of-service via a crafted aac file. Recommendations For Libav versio...
CVE-2018-18828: Out-of-bounds Write
There exists a heap-based buffer overflow in vc1decodeiblockadv in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...
CVE-2018-18826: Out-of-bounds Write
There exists a heap-based buffer overflow in vc1decodepmbintfi in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...
CVE-2018-18827: Out-of-bounds Read
There exists a heap-based buffer over-read in ffvc1preddc in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...
PT-2018-14675
Name of the Vulnerable Software and Affected Versions Libav version 12.3 Description A heap-based buffer over-read exists in the ff vc1 pred dc function in vc1 block.c, which can be exploited by attackers to cause a denial-of-service via a crafted aac file. Recommendations For Libav version 12.3,...
CVE-2018-18829: NULL Pointer Dereference
There exists a NULL pointer dereference in ffvc1parseframeheaderadv in vc1.c in Libav 12.3, which allows attackers to cause a denial-of-service through a crafted aac file...
PT-2018-14677
Name of the Vulnerable Software and Affected Versions Libav version 12.3 Description A NULL pointer dereference exists in the ff vc1 parse frame header adv function in vc1.c, which can be exploited by attackers to cause a denial-of-service through a crafted file. Recommendations For Libav version...
PT-2018-14674
Name of the Vulnerable Software and Affected Versions Libav version 12.3 Description A heap-based buffer overflow exists in the vc1 decode p mb intfi function in vc1 block.c, which can be exploited by attackers to cause a denial-of-service via a crafted aac file. Recommendations For Libav version...
CVE-2018-14448
Codec::parse in track.cpp in Untrunc through 2018-06-07 has a NULL pointer dereference via a crafted MP4 file because of improper interaction with libav...
