CVE-2017-17555 PUBLISHED

The swri_audio_convert function in audioconvert.c in FFmpeg libswresample through 3.0.101, as used in FFmpeg 3.4.1, aubio 0.4.6, and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted audio file.

EPSS 0.36% · 57.9th percentile

Risk Scores

EPSS Score
0.36%
57.9th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSaubio0, 0.4.1-2build4
Ubuntu:18.04:LTSaubio0, 0.4.5-1build1

Timeline

References

Open in Interactive Console →