libav before 12.1 is vulnerable to an invalid read of size 1 due to NULL pointer dereferencing in the nsv_read_chunk function in libavformat/nsvdec.c.
Weakness
The product dereferences a pointer that it expects to be valid but is NULL.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libav | Libav | * | 12.0 (including) |
| Ffmpeg | Ubuntu | upstream | * |
| Ffmpeg | Ubuntu | yakkety | * |
| Ffmpeg | Ubuntu | zesty | * |
| Libav | Ubuntu | esm-infra-legacy/trusty | * |
| Libav | Ubuntu | trusty | * |
| Libav | Ubuntu | trusty/esm | * |
| Libav | Ubuntu | upstream | * |
Potential Mitigations
References
- http://www.securityfocus.com/bid/98548
- https://bugzilla.libav.org/show_bug.cgi?id=1039
- https://github.com/libav/libav/commit/fe6eea99efac66839052af547426518efd970b24
- http://www.securityfocus.com/bid/98548
- https://bugzilla.libav.org/show_bug.cgi?id=1039
- https://github.com/libav/libav/commit/fe6eea99efac66839052af547426518efd970b24