CVE Catalog
CVE-2017-7206
HighSummary
The ff_h2645_extract_rbsp function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read) or obtain sensitive information from process memory via a crafted h264 video file.
Risk Assessment
An attacker can exploit this vulnerability to disrupt application functionality or steal sensitive data, posing a serious security threat to the system.
Recommendation
It is recommended to update libav to the latest version to mitigate this vulnerability and to monitor systems for suspicious video files.
Other vulnerabilities in libavcodec in libav 9.21
Original NVD description (English source)
The ff_h2645_extract_rbsp function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read) or obtain sensitive information from process memory via a crafted h264 video file.