| Package | Affected versions | Patched versions |
|---|---|---|
| libav | = 12.3 |
In Libav 12.3, there is a heap-based buffer over-read in decode_frame in libavcodec/lcldec.c that allows an attacker to cause denial-of-service via a crafted avi file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free