vulnerability

FreeBSD: VID-7801b1e1-99b4-42ac-ab22-7646235e7c16 (CVE-2017-14181): aacplusenc -- denial of service

Severity
7
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Published
Sep 25, 2017
Added
Sep 26, 2017
Modified
Dec 10, 2025

Description

Gentoo developers report: DeleteBitBuffer in libbitbuf/bitbuffer.c in mp4tools aacplusenc 0.17.5 allows remote attackers to cause a denial of service (invalid memory write, SEGV on unknown address 0x000000000030, and application crash) or possibly have unspecified other impact via a crafted .wav file, aka a NULL pointer dereference.

Solution

freebsd-upgrade-package-aacplusenc
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.