High severity8.8NVD Advisory· Published Jan 18, 2018· Updated Jun 17, 2026

CVE-2018-5766

Description

In Libav through 12.2, there is an invalid memcpy in the av_packet_ref function of libavcodec/avpacket.c. Remote attackers could leverage this vulnerability to cause a denial of service (segmentation fault) via a crafted avi file.

Affected products

Libav/Libavinferred3 versions
<=12.2+ 2 more
- (no CPE)range: <=12.2
- cpe:2.3:a:libav:libav:*:*:*:*:*:*:*:*range: <=12.2
- (no CPE)range: <=12.2

Patches

Vulnerability mechanics

References

bugzilla.libav.org/show_bug.cginvdExploitIssue TrackingThird Party Advisory
www.securityfocus.com/bid/102793nvdThird Party AdvisoryVDB Entry
lists.debian.org/debian-lts-announce/2019/09/msg00000.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000