[Bug 1086647] VUL-1: CVE-2017-18242: The apply_dependent_coupling function in libavcodec/aacdec.c allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted aac file.

http://bugzilla.opensuse.org/show_bug.cgi?id=1086647 http://bugzilla.opensuse.org/show_bug.cgi?id=1086647#c1 --- Comment #1 from Karol Babioch <kbabioch@suse.com> --- We do not ship libav, but this might potentially also affect ffmpeg. Adding this bug for tracking purposes. -- You are receiving this mail because: You are on the CC list for the bug.