NVD

Id
87443  
Name
CVE-2017-9994  
Description
libavcodec/webp.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 does not ensure that pix_fmt is set, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file, related to the vp8_decode_mb_row_no_filter and pred8x8_128_dc_8_c functions.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2017-06-28  
Modified Date
2017-07-05  
Seq
2017-9994  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
426313 87443 CVE-2017-0641 98868  View
426314 87443 CVE-2017-0641 https://android.googlesource.com/platform/external/libvpx/+/698796fc930baecf5c3fdebef17e73d5d9a58bcb  View
426315 87443 CVE-2017-0641 https://source.android.com/security/bulletin/2017-06-01  View
426316 87443 CVE-2017-0641 98868  View
426317 87443 CVE-2017-0641 https://android.googlesource.com/platform/external/libvpx/+/698796fc930baecf5c3fdebef17e73d5d9a58bcb  View
426318 87443 CVE-2017-0641 https://source.android.com/security/bulletin/2017-06-01  View
426319 87443 CVE-2017-0641 98868  View
426320 87443 CVE-2017-0641 https://android.googlesource.com/platform/external/libvpx/+/698796fc930baecf5c3fdebef17e73d5d9a58bcb  View
426321 87443 CVE-2017-0641 https://source.android.com/security/bulletin/2017-06-01  View

Related JVN