Patchwire CVEs, their patch status, and feeds to follow them

CVE-2017-17127

Fixed in a distro release EPSS 2%

The vc1_decode_frame function in libavcodec/vc1dec.c in Libav 12.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file.

Published 2017-12-04 · CVE record · OSV

Products: libav

Distro releases

ReleasePackageFixed in
Debian 8libav6:11.12-1~deb8u9
Ubuntu Pro 14.04 LTSlibavno fix