CVE-2018-18829: Null Pointer Dereference
Published Oct 30, 2018
·Updated
There exists a NULL pointer dereference in ffvc1parseframeheaderadv in vc1.c in Libav 12.3, which allows attackers to cause a denial-of-service through a crafted aac file.
Affected Software
1 affected component
Libav Libav=12.3
Event History
Oct 30, 2018
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-18829?
CVE-2018-18829 has a severity rating that can lead to denial-of-service attacks.
2
How do I fix CVE-2018-18829?
To fix CVE-2018-18829, you should upgrade Libav to version 12.4 or later.
3
What type of attack does CVE-2018-18829 enable?
CVE-2018-18829 enables attackers to cause a denial-of-service through a crafted AAC file.
4
Which software versions are affected by CVE-2018-18829?
Libav version 12.3 is affected by CVE-2018-18829.
5
In which function does CVE-2018-18829 occur?
CVE-2018-18829 occurs in the ff_vc1_parse_frame_header_adv function in vc1.c.