CVE-2019-9746: Null Pointer Dereference
In libwebm before 2019-03-08, a NULL pointer dereference caused by the functions OutputCluster and OutputTracks in webminfo.cc will trigger an abort, which allows a DoS attack, a similar issue to CVE-2018-19212.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2019-9746?
CVE-2019-9746 is a vulnerability found in libwebm before 2019-03-08 that can lead to a denial-of-service (DoS) attack by triggering a NULL pointer dereference.
How can CVE-2019-9746 be exploited?
CVE-2019-9746 can be exploited by calling the OutputCluster or OutputTracks functions in webm_info.cc with a NULL pointer, causing an abort and resulting in a DoS attack.
What is the severity of CVE-2019-9746?
The severity of CVE-2019-9746 is high, with a CVSS score of 7.5.
Which software is affected by CVE-2019-9746?
The affected software is Webmproject Libwebm version 1.0.0.27.
How can I fix CVE-2019-9746?
To fix CVE-2019-9746, update to a version of libwebm after 2019-03-08 that includes the necessary patch to address the NULL pointer dereference.