CVE-2017-13135

A NULL Pointer Dereference exists in VideoLAN x265, as used in libbpg 0.9.7 and other products, because the CUData::initialize function in common/cudata.cpp mishandles memory-allocation failure.

Score

CVSS 3.0 7.8 High

Status

Modified - cve@mitre.org

Published

2017-11-16

Last modified

2024-08-05

Weaknesses

CWE-476

Affected products

• Libbpg (Libbpg Project)

References

• http://www.securityfocus.com/bid/101929
• https://github.com/ebel34/bpg-web-encoder/issues/1