VYPR
High severity8.8OSV Advisory· Published Apr 19, 2019· Updated Jun 17, 2026

CVE-2019-11338

CVE-2019-11338

Description

libavcodec/hevcdec.c in FFmpeg 3.4 and 4.1.2 mishandles detection of duplicate first slices, which allows remote attackers to cause a denial of service (NULL pointer dereference and out-of-array access) or possibly have unspecified other impact via crafted HEVC data.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

17

Patches

Vulnerability mechanics

References

9

News mentions

0

No linked articles in our index yet.