CVE-2018-13302

In FFmpeg 4.0.1, improper handling of frame types other than EAC3FRAMETYPEINDEPENDENT that have multiple independent substreams in the handleeac3 function in libavformat/movenc.c may trigger an out-of-array access while converting a crafted AVI file to MPEG4, leading to a denial of service or...

CVE-2018-13304

In libavcodec in FFmpeg 4.0.1, improper maintenance of the consistency between the context profile field and studioprofile in libavcodec may trigger an assertion failure while converting a crafted AVI file to MPEG4, leading to a denial of service, related to errorresilience.c, h263dec.c, and...

CVE-2018-13300

In FFmpeg 3.2 and 4.0.1, an improper argument AVCodecParameters passed to the avprivrequestsample function in the handleeac3 function in libavformat/movenc.c may trigger an out-of-array read while converting a crafted AVI file to MPEG4, leading to a denial of service and possibly an information...

CVE-2018-13301

In FFmpeg 4.0.1, due to a missing check of a profile value before setting it, the ffmpeg4decodepictureheader function in libavcodec/mpeg4videodec.c may trigger a NULL pointer dereference while converting a crafted AVI file to MPEG4, leading to a denial of service...

CVE-2018-13303

In FFmpeg 4.0.1, a missing check for failure of a call to initgetbits8 in the avprivac3parseheader function in libavcodec/ac3parser.c may trigger a NULL pointer dereference while converting a crafted AVI file to MPEG4, leading to a denial of service...

CVE-2018-13305

In FFmpeg 4.0.1, due to a missing check for negative values of the mquant variable, the vc1putblocksclamped function in libavcodec/vc1block.c may trigger an out-of-array access while converting a crafted AVI file to MPEG4, leading to an information disclosure or a denial of service...

PT-2018-4002

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.0.1 Description The issue is related to a missing check for failure of a call to init get bits8 in the avpriv ac3 parse header function in libavcodec/ac3 parser.c. This may trigger a NULL pointer dereference while converting a...

PT-2018-3997

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to commit a7e032a277452366771951e29fd0bf2bd5c029f0 Description The issue is related to a use-after-free vulnerability in the realmedia demuxer of the FFmpeg multimedia library. This vulnerability can be exploited by a...

CVE-2018-13301: NULL Pointer Dereference

In FFmpeg 4.0.1, due to a missing check of a profile value before setting it, the ffmpeg4decodepictureheader function in libavcodec/mpeg4videodec.c may trigger a NULL pointer dereference while converting a crafted AVI file to MPEG4, leading to a denial of service...

CVE-2018-13305: Out-of-bounds Read

In FFmpeg 4.0.1, due to a missing check for negative values of the mquant variable, the vc1putblocksclamped function in libavcodec/vc1block.c may trigger an out-of-array access while converting a crafted AVI file to MPEG4, leading to an information disclosure or a denial of service...

CVE-2018-13302: Improper Validation of Array Index

In FFmpeg 4.0.1, improper handling of frame types other than EAC3FRAMETYPEINDEPENDENT that have multiple independent substreams in the handleeac3 function in libavformat/movenc.c may trigger an out-of-array access while converting a crafted AVI file to MPEG4, leading to a denial of service or...

CVE-2018-13304: Reachable Assertion

In libavcodec in FFmpeg 4.0.1, improper maintenance of the consistency between the context profile field and studioprofile in libavcodec may trigger an assertion failure while converting a crafted AVI file to MPEG4, leading to a denial of service, related to errorresilience.c, h263dec.c, and...

PT-2018-3995

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 5aba5b89d0b1d73164d3b81764828bb8b20ff32a Description The issue is related to an out of array read in the ASF F format demuxer, which can result in heap memory reading. This can be exploited via a specially crafted ASF...

PT-2018-3996

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to bab0716c7f4793ec42e05a5aa7e80d82a0dd4e75 Description The issue is related to an out of array access vulnerability in the MXF format demuxer, which can result in a denial of service DoS. This can be exploited via a...

PT-2018-11728

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.0.1 Description The issue arises from a missing check for negative values of the mquant variable in the vc1 put blocks clamped function, located in libavcodec/vc1 block.c. This can lead to an out-of-array access when convertin...

CVE-2018-13300: Out-of-bounds Read

In FFmpeg 3.2 and 4.0.1, an improper argument AVCodecParameters passed to the avprivrequestsample function in the handleeac3 function in libavformat/movenc.c may trigger an out-of-array read while converting a crafted AVI file to MPEG4, leading to a denial of service and possibly an information...

CVE-2018-13303: NULL Pointer Dereference

In FFmpeg 4.0.1, a missing check for failure of a call to initgetbits8 in the avprivac3parseheader function in libavcodec/ac3parser.c may trigger a NULL pointer dereference while converting a crafted AVI file to MPEG4, leading to a denial of service...

PT-2018-3998

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 9807d3976be0e92e4ece3b4b1701be894cd7c2e1 Description The issue is related to an infinite loop vulnerability in the pva format demuxer. This can be exploited by providing a specially crafted PVA file as input, allowing...

PT-2018-11727

Name of the Vulnerable Software and Affected Versions FFmpeg versions 3.2 and 4.0.1 Description The issue arises from an improper argument AVCodecParameters passed to the avpriv request sample function in the handle eac3 function, potentially triggering an out-of-array read when converting a...

PT-2018-4001

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.0.1 Description The issue is related to improper maintenance of consistency between the context profile field and studio profile in libavcodec, which may trigger an assertion failure when converting a crafted AVI file to MPEG4...