The vulnerability of the `ff_mpeg4_decode_picture_header` function in the `libavcodec/mpeg4videodec.c` file of the FFmpeg multimedia library, related to insufficient input data validation, allows a attacker to trigger a service failure.

🗓️ 07 Nov 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

FFmpeg ff_mpeg4_decode_picture_header input validation flaw causes failure via crafted file.

Reporter	Title	Published	Views	Family All 16
AlpineLinux	CVE-2018-12459	15 Jun 201815:00	–	alpinelinux
CNVD	FFmpeg 'ff_mpeg4_decode_picture_header' function denial of service vulnerability	20 Jun 201800:00	–	cnvd
CVE	CVE-2018-12459	15 Jun 201815:00	–	cve
Cvelist	CVE-2018-12459	15 Jun 201815:00	–	cvelist
Debian CVE	CVE-2018-12459	15 Jun 201815:00	–	debiancve
EUVD	EUVD-2018-4429	7 Oct 202500:30	–	euvd
NVD	CVE-2018-12459	15 Jun 201815:29	–	nvd
OSV	CLEANSTART-2026-EZ98723 Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60 allows a remote attacker to achieve an out-of-array write, execute arbitrary code, and cause a ...	30 Jan 202614:21	–	osv
OSV	CLEANSTART-2026-PS82605 Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60 allows a remote attacker to achieve an out-of-array write, execute arbitrary code, and cause a ...	6 Feb 202601:09	–	osv
OSV	CLEANSTART-2026-XE32069 Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60 allows a remote attacker to achieve an out-of-array write, execute arbitrary code, and cause a ...	6 Feb 202601:10	–	osv

Vulners

Node

ffmpeg ffmpegRange<4.0.1

Source	Link
github	www.github.com/FFmpeg/FFmpeg/commit/2fc108f60f98cd00813418a8754a46476b404a3c
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-12459
security-tracker	www.security-tracker.debian.org/tracker/CVE-2018-12459
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20241017SE16
web	www.web.nvd.nist.gov/view/vuln/detail

07 Nov 2024 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 36.5

CVSS 27.8

EPSS0.01061

ffmpeg mpeg4 decode picture header input validation vulnerability crafted file avi file service failure