NULL Pointer Dereference Vulnerability in Libav 12.3's ff_vc1_parse_frame_header_adv Function

NULL Pointer Dereference Vulnerability in Libav 12.3's ff_vc1_parse_frame_header_adv Function

CVE-2018-18829 · MEDIUM Severity

AV:N/AC:M/AU:N/C:N/I:N/A:P

There exists a NULL pointer dereference in ff_vc1_parse_frame_header_adv in vc1.c in Libav 12.3, which allows attackers to cause a denial-of-service through a crafted aac file.

Learn more about our Web Application Penetration Testing UK.