CVE-2018-10001

2018-04-1103:29:00

Google

osv.dev

0.003 Low

EPSS

Percentile

66.3%

JSON

The decode_init function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (out of array read) via an AVI file.

CPENameOperatorVersion
ffmpeg.giteqn2.8-de
ffmpeg.giteqn3.2-de
ffmpeg.giteqn0.12-de
ffmpeg.giteqn2.1-de
ffmpeg.giteqn2.3-de
ffmpeg.giteqn1.1-de
ffmpeg.giteqn3.1-de
ffmpeg.giteqn2.6-de
ffmpeg.giteqn3.4.1
ffmpeg.giteqn3.4

Name	Operator	Version
ffmpeg.git	eq	n2.8-de
ffmpeg.git	eq	n3.2-de
ffmpeg.git	eq	n0.12-de
ffmpeg.git	eq	n2.1-de
ffmpeg.git	eq	n2.3-de
ffmpeg.git	eq	n1.1-de
ffmpeg.git	eq	n3.1-de
ffmpeg.git	eq	n2.6-de
ffmpeg.git	eq	n3.4.1
ffmpeg.git	eq	n3.4