CVE-2017-1000460: Null Pointer Dereference
In line libavcodec/h264dec.c:500 in libav(v13dev0), ffmpeg(n3.4), chromium(56 prior Feb 13, 2017), the return value of initgetbits is ignored and getuegolomb(&gb) is called on an uninitialized getbits context, which causes a NULL deref exception.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-1000460?
CVE-2017-1000460 is classified as a medium severity vulnerability due to the potential for a NULL dereference exception.
How do I fix CVE-2017-1000460?
To fix CVE-2017-1000460, update to a patched version of Libav, FFmpeg, or Google Chrome that addresses this issue.
Which software versions are affected by CVE-2017-1000460?
CVE-2017-1000460 affects Libav 13_dev0, FFmpeg 3.4, and Google Chrome versions prior to 56.0.2924.
What type of vulnerability is CVE-2017-1000460?
CVE-2017-1000460 is a NULL dereference vulnerability caused by improper handling of an uninitialized context.
What are the implications of CVE-2017-1000460?
Exploitation of CVE-2017-1000460 could lead to application crashes and degraded user experiences due to unexpected NULL dereferences.