CVE-2018-6406

CVE-2018-6406 affects libwebm: the ParseVP9SuperFrameIndex function in common/libwebm_util.cc does not validate child_frame_length from a .webm file, allowing remote attackers to cause information leaks or a denial of service via a heap-based buffer over-read and subsequent out-of-bounds write. T...