CVE-2016-8676

The get_vlc2 function in get_bits.h in Libav 11.9 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted mp3…

published February 15, 2017

CVSS
—
EPSS
2%
Percentile
76.3
In the wild
Unconfirmed
What it is

The get_vlc2 function in get_bits.h in Libav 11.9 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted mp3 file. NOTE: this issue exists due to an incomplete fix for CVE-2016-8675.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01657 · 76.3th percentile
Published
2017-02-15T21:00Z
EPSS history
Timeline
  • 15 FEB 21:00Z
    The get_vlc2 function in get_bits.h in Libav 11.9 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted mp3…
    cvelistv5