Skip to content
OpenAdvisories
Unscored CVE-2017-18246 EUVD-2017-9377GHSA-rr77-8xvw-xxm9

The pcm_encode_frame function in libavcodec/pcm.c in Libav 12.2 allows remote attackers to cause a denial of service (heap-based buffer ove…

Published Mar 23, 2018 · Updated Sep 17, 2024 · Assigned by mitre

Description

The pcm_encode_frame function in libavcodec/pcm.c in Libav 12.2 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted media file.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu Pro 14.04 LTS libav No fix yet —

References