CVE-2018-19130

In Libav 12.3, there is an invalid memory access in vc1_decode_frame in libavcodec/vc1dec.c that allows attackers to cause a denial-of-service via a crafted aac file. NOTE: This may be a duplicate of CVE-2017-17127

CVSS v3.0

6.5 MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P

EPSS

1.13% chance of exploitation in the next 30 days, 64th percentile

Published

2018-11-09

Updated

2024-08-05

Proof-of-concept exploits (1)

• https://bugzilla.libav.org/show_bug.cgi?id=1139

References

• CVE Record
• NVD entry

Related

• CVE-2018-19127
• CVE-2018-19131
• CVE-2018-19126
• CVE-2018-19135
• CVE-2018-19125
• CVE-2018-19136