High severity7.5NVD Advisory· Published Jul 27, 2017· Updated Jun 17, 2026

CVE-2017-11684

Description

There is an illegal address access in the build_table function in libavcodec/bitstream.c of Libav 12.1 that will lead to remote denial of service via crafted input.

Affected products

Libav/Libav2 versions
cpe:2.3:a:libav:libav:12.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:libav:libav:12.1:*:*:*:*:*:*:*
- (no CPE)range: =12.1
Libav/libavcodecllm-fuzzy
Range: =12.1

Patches

Vulnerability mechanics

References

bugzilla.libav.org/show_bug.cginvdExploitIssue TrackingThird Party Advisory
www.securityfocus.com/bid/99980nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000