CVE-2018-13301

In FFmpeg 4.0.1, due to a missing check of a profile value before setting it, the ffmpeg4decodepictureheader function in libavcodec/mpeg4videodec.c may trigger a NULL pointer dereference while converting a crafted AVI file to MPEG4, leading to a denial of service...

CVE-2018-13301: NULL Pointer Dereference

In FFmpeg 4.0.1, due to a missing check of a profile value before setting it, the ffmpeg4decodepictureheader function in libavcodec/mpeg4videodec.c may trigger a NULL pointer dereference while converting a crafted AVI file to MPEG4, leading to a denial of service...

PT-2018-11189

Name of the Vulnerable Software and Affected Versions FFmpeg versions 2.8 through 4.0 Description The issue is related to an improper integer type in the mpeg4 encode gop header function, which may cause an assertion violation when converting a crafted AVI file to MPEG4. This can lead to a denial...