CVE-2017-18244 on Ubuntu 18.04 LTS (bionic) - medium.
Description:
The stereo_processing function in libavcodec/aacps.c in Libav 12.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted aac file, related to ff_ps_apply.