Null pointer dereference

There exists a NULL pointer dereference in ffvc1parseframeheaderadv in vc1.c in Libav 12.3, which allows attackers to cause a denial-of-service through a crafted aac file...

CVE-2018-18829

CVE-2018-18829 describes a NULL pointer dereference in Libav 12.3, specifically in ff_vc1_parse_frame_header_adv (vc1.c). The underlying issue can cause a denial-of-service when parsing a crafted AAC file. The vulnerability affects Libav’s vc1 decoder path as implemented in that version. There is...