Patchwire CVEs, their patch status, and feeds to follow them

CVE-2017-18242

No fix known EPSS 1%

The apply_dependent_coupling function in libavcodec/aacdec.c in Libav 12.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted aac file.

Published 2018-03-22 · CVE record · OSV

Products: libav

Distro releases

ReleasePackageFixed in
Ubuntu Pro 14.04 LTSlibavno fix