CVE-2017-14181

DeleteBitBuffer in libbitbuf/bitbuffer.c in mp4tools aacplusenc 0.17.5 allows remote attackers to cause a denial of service (invalid memory write, SEGV on unknown address 0x000000000030, and application crash) or possibly have unspecified other impact via a crafted .wav file, aka a NULL pointer dereference.

• CWE-476

• https://blogs.gentoo.org/ago/2017/09/07/aacplusenc-null-pointer-dereference-in-deletebitbuffer-bitbuffer-c/Exploit, Third Party Advisory
• https://github.com/teknoraver/aacplusenc/issues/1Exploit, Issue Tracking, Third Party Advisory
• https://blogs.gentoo.org/ago/2017/09/07/aacplusenc-null-pointer-dereference-in-deletebitbuffer-bitbuffer-c/Exploit, Third Party Advisory
• https://github.com/teknoraver/aacplusenc/issues/1Exploit, Issue Tracking, Third Party Advisory

Published

Sep 7, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14176Bazaar through 2.7.0, when Subprocess SSH is used, allows re…
• CVE-2017-14177Apport through 2.20.7 does not properly handle core dumps fr…
• CVE-2017-14178In snapd 2.27 through 2.29.2 the 'snap logs' command could b…
• CVE-2017-14179Apport before 2.13 does not properly handle crashes originat…
• CVE-2017-1418IBM Integration Bus 9.0.0.0, 9.0.0.11, 10.0.0.0, and 10.0.0.…4
• CVE-2017-14180Apport 2.13 through 2.20.7 does not properly handle crashes …
• CVE-2017-14182A Denial of Service (DoS) vulnerability in Fortinet FortiOS …
• CVE-2017-14184An Information Disclosure vulnerability in Fortinet FortiCli…
• CVE-2017-14185An Information Disclosure vulnerability in Fortinet FortiOS …
• CVE-2017-14186A Cross-site Scripting (XSS) vulnerability in Fortinet Forti…
• CVE-2017-14187A local privilege escalation and local code execution vulner…
• CVE-2017-14189An improper access control vulnerability in Fortinet FortiWe…