Vulnerabilities > CVE-2016-7477 - NULL Pointer Dereference vulnerability in Libav 11.7

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
local
low complexity
libav
CWE-476

Summary

The ff_put_pixels8_xy2_mmx function in rnd_template.c in Libav 11.7 allows remote attackers to cause a denial of service (invalid memory access and crash) via a crafted mp3 file. NOTE: this issue was originally reported as involving a NULL pointer dereference.

Vulnerable Configurations

Part Description Count
Application
Libav
1

Common Weakness Enumeration (CWE)