CVE-2017-14181 DeleteBitBuffer in libbitbuf/bitbuffer.c in mp4tools aacplusenc 0.17.5 allows remote attackers to cause a denial of service (invalid memory write, SEGV on unknown address 0x000000000030, and applicati...
HighCVSS 7.8
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
DeleteBitBuffer in libbitbuf/bitbuffer.c in mp4tools aacplusenc 0.17.5 allows remote attackers to cause a denial of service (invalid memory write, SEGV on unknown address 0x000000000030, and application crash) or possibly have unspecified other impact via a crafted .wav file, aka a NULL pointer dereference.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| aacplusenc project aacplusenc | = 0.17.5 | No fix listed |
References
- blogs.gentoo.org exploit third-party-advisory
- github.com exploit issue-tracking third-party-advisory