CVE-2018-19129: Null Pointer Dereference
Published Nov 9, 2018
·Updated
In Libav 12.3, a NULL pointer dereference (RIP points to zero) issue in ffmpasynthfilterfloat in libavcodec/mpegaudiodsptemplate.c can cause a segmentation fault (application crash) via a crafted mov file.
Affected Software
1 affected component
Libav Libav=12.3
Event History
Nov 9, 2018
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-19129?
CVE-2018-19129 has a medium severity due to the potential for application crashes caused by a NULL pointer dereference.
2
How do I fix CVE-2018-19129?
To fix CVE-2018-19129, update Libav to version 12.4 or later, which addresses this vulnerability.
3
What software is affected by CVE-2018-19129?
CVE-2018-19129 affects Libav version 12.3 specifically.
4
What is the impact of CVE-2018-19129?
The impact of CVE-2018-19129 is a segmentation fault which results in the application crashing when processing a crafted mov file.
5
What is the cause of CVE-2018-19129?
CVE-2018-19129 is caused by a NULL pointer dereference in the ff_mpa_synth_filter_float function in the Libav codec.