VULNERABILITY INTELLIGENCE

CVE-2018-19130

CVSS score6.5 MEDIUM

EPSS probability1.13%

CISA KEVNot currently listed

Published2018-11-09

Last modified2026-06-17

Description

In Libav 12.3, there is an invalid memory access in vc1_decode_frame in libavcodec/vc1dec.c that allows attackers to cause a denial-of-service via a crafted aac file. NOTE: This may be a duplicate of CVE-2017-17127