CVE-2018-19128 In Libav 12.3, there is a heap-based buffer over-read in decode_frame in libavcodec/lcldec.c that allows an attacker to cause denial-of-service via a crafted avi file.
MediumCVSS 6.5
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In Libav 12.3, there is a heap-based buffer over-read in decode_frame in libavcodec/lcldec.c that allows an attacker to cause denial-of-service via a crafted avi file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| libav | = 12.3 | No fix listed |
References
- bugzilla.libav.org issue-tracking third-party-advisory
- [debian-lts-announce] 20191205 [SECURITY] [DLA 2021-1] libav security update mailing-list