Medium severity6.5NVD Advisory· Published Mar 22, 2018· Updated Jun 17, 2026

CVE-2017-18242

Description

The apply_dependent_coupling function in libavcodec/aacdec.c in Libav 12.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted aac file.

Affected products

Libav/Libavinferred
Range: =12.2
Libav/libavcodecllm-create
Range: =12.2

Patches

Vulnerability mechanics

References

bugzilla.libav.org/show_bug.cginvdIssue TrackingThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000