CVE-2018-0429: Cisco Thor Video Codec

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the Cisco Thor decoder before commit 18de8f9f0762c3a542b1122589edb8af859d9813 allows local users to cause a denial of service (segmentation fault) and execute arbitrary code via a crafted non-conformant Thor bitstream.

Affected products

• Cisco Thor Video Codec: before 2018-8-8 (fixed in 2018-8-8)

Published 2018-08-09. Last modified 2026-06-17.