CVE-2018-0429

Severity: high (CVSS 7.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-08-09 · updated 2026-06-17
Weakness: CWE-119

Description

Stack-based buffer overflow in the Cisco Thor decoder before commit 18de8f9f0762c3a542b1122589edb8af859d9813 allows local users to cause a denial of service (segmentation fault) and execute arbitrary code via a crafted non-conformant Thor bitstream.

Affected products

Cisco Thor Video Codec: before 2018-8-8 — fixed in 2018-8-8

How to fix

Upgrade to a fixed version: Cisco Thor Video Codec 2018-8-8. Check the vendor advisory for mitigations.

References

http://www.securityfocus.com/bid/105059
https://github.com/cisco/thor/commit/18de8f9f0762c3a542b1122589edb8af859d9813
http://www.securityfocus.com/bid/105059
https://github.com/cisco/thor/commit/18de8f9f0762c3a542b1122589edb8af859d9813

Get alerted when CVE-2018-0429 or the next vulnerability affects your stack