CVE-2018-13304

2018-07-0517:29:00

Google

osv.dev

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.3%

JSON

In libavcodec in FFmpeg 4.0.1, improper maintenance of the consistency between the context profile field and studio_profile in libavcodec may trigger an assertion failure while converting a crafted AVI file to MPEG4, leading to a denial of service, related to error_resilience.c, h263dec.c, and mpeg4videodec.c.

CPENameOperatorVersion
ffmpeg.giteqn4.0
ffmpeg.giteqn2.8-de
ffmpeg.giteqn3.2-de
ffmpeg.giteqn0.12-de
ffmpeg.giteqn2.1-de
ffmpeg.giteqn2.3-de
ffmpeg.giteqn1.1-de
ffmpeg.giteqn3.1-de
ffmpeg.giteqn2.6-de
ffmpeg.giteqn0.11-de

Name	Operator	Version
ffmpeg.git	eq	n4.0
ffmpeg.git	eq	n2.8-de
ffmpeg.git	eq	n3.2-de
ffmpeg.git	eq	n0.12-de
ffmpeg.git	eq	n2.1-de
ffmpeg.git	eq	n2.3-de
ffmpeg.git	eq	n1.1-de
ffmpeg.git	eq	n3.1-de
ffmpeg.git	eq	n2.6-de
ffmpeg.git	eq	n0.11-de