CVE-2017-17555

The swri_audio_convert function in audioconvert.c in FFmpeg libswresample through 3.0.101, as used in FFmpeg 3.4.1, aubio 0.4.6, and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted audio file.

Score

CVSS 3.0 6.5 Medium

Status

Modified - cve@mitre.org

Published

2017-12-12

Last modified

2024-08-05

Weaknesses

CWE-476

Affected products

• Aubio (Aubio)
• Ffmpeg (Ffmpeg)
• Libswresample (Ffmpeg)

References

• http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00012.html
• https://github.com/IvanCql/vulnerability/blob/master/An%20NULL%20pointer%20dereference%28DoS%29%20Vulnerability%20was%2…