CVE-2018-18827

There exists a heap-based buffer over-read in ffvc1preddc in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...

CVE-2018-18828

There exists a heap-based buffer overflow in vc1decodeiblockadv in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...

CVE-2018-18829

There exists a NULL pointer dereference in ffvc1parseframeheaderadv in vc1.c in Libav 12.3, which allows attackers to cause a denial-of-service through a crafted aac file...

CVE-2018-18827

There exists a heap-based buffer over-read in ffvc1preddc in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...

CVE-2018-18827

There exists a heap-based buffer over-read in ffvc1preddc in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...

CVE-2018-18826

There exists a heap-based buffer overflow in vc1decodepmbintfi in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...

UBUNTU-CVE-2018-18826

There exists a heap-based buffer overflow in vc1decodepmbintfi in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...

UBUNTU-CVE-2018-18828

There exists a heap-based buffer overflow in vc1decodeiblockadv in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...

UBUNTU-CVE-2018-18827

There exists a heap-based buffer over-read in ffvc1preddc in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...

CVE-2018-18828

There is a heap-based buffer overflow in Libav 12.3 (vc1_decode_i_block_adv in vc1_block.c) that can cause denial-of-service when processing a crafted AAC file. The vulnerability affects Libav’s vc1_block.c component and is documented under CVE-2018-18828. No public exploitation details are provi...

CVE-2018-18827

There exists a heap-based buffer over-read in ffvc1preddc in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...

CVE-2018-18829

There exists a NULL pointer dereference in ffvc1parseframeheaderadv in vc1.c in Libav 12.3, which allows attackers to cause a denial-of-service through a crafted aac file...

CVE-2018-18826

CVE-2018-18826 describes a heap-based buffer overflow in Libav 12.3, specifically in the vc1_decode_p_mb_intfi function of vc1_block.c. The vulnerability allows an attacker to cause a denial-of-service by feeding a specially crafted AAC file. The connected documents confirm the affected component...

CVE-2018-18829

CVE-2018-18829 describes a NULL pointer dereference in Libav 12.3, specifically in ff_vc1_parse_frame_header_adv (vc1.c). The underlying issue can cause a denial-of-service when parsing a crafted AAC file. The vulnerability affects Libav’s vc1 decoder path as implemented in that version. There is...

CVE-2018-18827

CVE-2018-18827 affects Libav 12.3: a heap-based buffer over-read in ff_vc1_pred_dc (vc1_block.c) can cause denial of service via a crafted AAC file. Affected component is Libav’s video decoding path; no explicit exploit details or vendor patch information are provided in the connected documents. ...

CVE-2018-18827: Out-of-bounds Read

There exists a heap-based buffer over-read in ffvc1preddc in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...

CVE-2018-18828: Out-of-bounds Write

There exists a heap-based buffer overflow in vc1decodeiblockadv in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...

CVE-2018-18826: Out-of-bounds Write

There exists a heap-based buffer overflow in vc1decodepmbintfi in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...

CVE-2018-18829: NULL Pointer Dereference

There exists a NULL pointer dereference in ffvc1parseframeheaderadv in vc1.c in Libav 12.3, which allows attackers to cause a denial-of-service through a crafted aac file...

CVE-2018-14448

Codec::parse in track.cpp in Untrunc through 2018-06-07 has a NULL pointer dereference via a crafted MP4 file because of improper interaction with libav...