CVE-2018-18827: Medium severity libavutil vulnerability
Published Oct 30, 2018
·Updated
There exists a heap-based buffer over-read in ffvc1preddc in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file.
Affected Software
1 affected component
Libav Libav=12.3
Event History
Oct 30, 2018
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-18827?
CVE-2018-18827 is classified as a denial-of-service vulnerability due to a heap-based buffer over-read.
2
How do I fix CVE-2018-18827?
To mitigate CVE-2018-18827, it is recommended to upgrade to a later version of Libav that addresses this vulnerability.
3
What types of files can exploit CVE-2018-18827?
CVE-2018-18827 can be exploited through a specially crafted AAC file.
4
What software versions are affected by CVE-2018-18827?
Libav version 12.3 is affected by CVE-2018-18827.
5
What is the impact of CVE-2018-18827 on systems?
The impact of CVE-2018-18827 can result in a denial-of-service condition, potentially crashing the application using Libav.