[Bug 1086647] VUL-1: CVE-2017-18242: The apply_dependent_coupling function in libavcodec/aacdec.c allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted aac file.

http://bugzilla.opensuse.org/show_bug.cgi?id=1086647 http://bugzilla.opensuse.org/show_bug.cgi?id=1086647#c2 Jan Engelhardt <jengelh@inai.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|jengelh@inai.de |alarrosa@suse.com --- Comment #2 from Jan Engelhardt <jengelh@inai.de> --- libavcodec/aacdec.c is not built in ffmpeg. -- You are receiving this mail because: You are on the CC list for the bug.