CVE-2018-9353

Summary

CVE-2018-9353 is a vulnerability affecting the ihevcd_parse_slice function in ihevcd_parse_slice.c. This issue involves a missing bounds check that results in a possible heap buffer out-of-bound read. An attacker taking advantage of this flaw can perform a remote denial-of-service attack without requiring additional execution privileges. However, user interaction is necessary for exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.