Vulnerabilities > CVE-2017-13135 - NULL Pointer Dereference vulnerability in Libbpg Project Libbpg 0.9.7

047910
CVSS 6.8 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL

Summary

A NULL Pointer Dereference exists in VideoLAN x265, as used in libbpg 0.9.7 and other products, because the CUData::initialize function in common/cudata.cpp mishandles memory-allocation failure.

Vulnerable Configurations

Part Description Count
Application
Libbpg_Project
1

Common Weakness Enumeration (CWE)