Vulnerabilities > CVE-2017-13135 - NULL Pointer Dereference vulnerability in Libbpg Project Libbpg 0.9.7

047910
CVSS 7.8 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
local
low complexity
libbpg-project
CWE-476

Summary

A NULL Pointer Dereference exists in VideoLAN x265, as used in libbpg 0.9.7 and other products, because the CUData::initialize function in common/cudata.cpp mishandles memory-allocation failure.

Vulnerable Configurations

Part Description Count
Application
Libbpg_Project
1

Common Weakness Enumeration (CWE)