ID CVE-2019-11338
概要 libavcodec/hevcdec.c in FFmpeg 4.1.2 mishandles detection of duplicate first slices, which allows remote attackers to cause a denial of service (NULL pointer dereference and out-of-array access) or possibly have unspecified other impact via crafted HEVC data.
参考情報
影響を受ける設定
  • FFmpeg 4.1.2
    cpe:2.3:a:ffmpeg:ffmpeg:4.1.2
CVSS
Base: 6.8
Impact: -
Exploitability:-
CWE CWE-476
CAPEC
refmap via4
bid 108034
misc https://github.com/FFmpeg/FFmpeg/commit/54655623a82632e7624714d7b2a3e039dc5faa7e
ubuntu USN-3967-1
更新日時 18-04-2019 - 20:29
公開日時 18-04-2019 - 20:29
更改日時 06-05-2019 - 17:29
Back to Top