The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In line libavcodec/h264dec.c:500 in libav(v13_dev0), ffmpeg(n3.4), chromium(56 prior Feb 13, 2017), the return value of init_get_bits is ignored and get_ue_golomb(&gb) is called on an uninitialized get_bits context, which causes a NULL deref exception.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Apr 1, 2019 | Jan 3, 2018 |
| Ffmpeg | — | Upgrade to FFmpeg version 3.1 | Jan 12, 2018 | Jan 3, 2018 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Feb 6, 2018 | Jan 3, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub