In FFmpeg 3.2 and 4.0.1, an improper argument (AVCodecParameters) passed to the avpriv_request_sample function in the handle_eac3 function in libavformat/movenc.c may trigger an out-of-array read while converting a crafted AVI file to MPEG4, leading to a denial of service and possibly an information disclosure.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-ffmpegalpine-linux-upgrade-ffmpeg4 | Aug 30, 2018 | Jul 5, 2018 | |
| Debian | debian-upgrade-ffmpeg | Jul 19, 2018 | Jul 5, 2018 | |
| Ffmpeg | ffmpeg-upgrade-3_2_11ffmpeg-upgrade-3_3_8ffmpeg-upgrade-3_4_3ffmpeg-upgrade-4_0_2ffmpeg-upgrade-4_1 | Jul 19, 2018 | Jul 5, 2018 | |
| Suse | — | suse-upgrade-ffmpegsuse-upgrade-ffmpeg-4-libavcodec-develsuse-upgrade-ffmpeg-4-libavdevice-develsuse-upgrade-ffmpeg-4-libavfilter-develsuse-upgrade-ffmpeg-4-libavformat-develsuse-upgrade-ffmpeg-4-libavresample-develsuse-upgrade-ffmpeg-4-libavutil-develsuse-upgrade-ffmpeg-4-libpostproc-develsuse-upgrade-ffmpeg-4-libswresample-develsuse-upgrade-ffmpeg-4-libswscale-develsuse-upgrade-ffmpeg-4-private-develsuse-upgrade-libavcodec-develsuse-upgrade-libavcodec57suse-upgrade-libavcodec58suse-upgrade-libavcodec58-64bitsuse-upgrade-libavdevice57suse-upgrade-libavdevice58suse-upgrade-libavdevice58-64bitsuse-upgrade-libavfilter6suse-upgrade-libavfilter7suse-upgrade-libavfilter7-64bitsuse-upgrade-libavformat-develsuse-upgrade-libavformat57suse-upgrade-libavformat58suse-upgrade-libavformat58-64bitsuse-upgrade-libavresample-develsuse-upgrade-libavresample3suse-upgrade-libavresample4suse-upgrade-libavresample4-64bitsuse-upgrade-libavutil-develsuse-upgrade-libavutil55suse-upgrade-libavutil56suse-upgrade-libavutil56-64bitsuse-upgrade-libpostproc-develsuse-upgrade-libpostproc54suse-upgrade-libpostproc55suse-upgrade-libpostproc55-64bitsuse-upgrade-libswresample-develsuse-upgrade-libswresample2suse-upgrade-libswresample3suse-upgrade-libswresample3-64bitsuse-upgrade-libswscale-develsuse-upgrade-libswscale4suse-upgrade-libswscale5suse-upgrade-libswscale5-64bit | Sep 17, 2018 | Jul 5, 2018 |
| Ubuntu | ubuntu-upgrade-ffmpeg | Nov 19, 2024 | Jul 5, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub