The swri_audio_convert function in audioconvert.c in FFmpeg libswresample through 3.0.101, as used in FFmpeg 3.4.1, aubio 0.4.6, and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted audio file.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade aubio | Jul 30, 2024 | Dec 12, 2017 |
| Ffmpeg | — | Upgrade to FFmpeg version 3.4.2 | Jan 2, 2018 | Dec 12, 2017 |
| Suse | — | Upgrade ffmpeg-4-libswscale-develUpgrade libswscale5-64bitUpgrade libpostproc55-32bitUpgrade libavutil55Upgrade libavresample3Upgrade libavresample4Upgrade ffmpeg-4-libavfilter-develUpgrade libswresample3Upgrade ffmpeg-4-libavdevice-develUpgrade ffmpeg-4-libavcodec-develUpgrade ffmpeg-4-libavresample-develUpgrade libavfilter7-64bitUpgrade libswscale4Upgrade libswresample3-64bitUpgrade libpostproc55-64bitUpgrade libavcodec-develUpgrade libavfilter7-32bitUpgrade libavformat58Upgrade libavdevice57Upgrade libavcodec58-32bitUpgrade libavdevice-develUpgrade libavformat57Upgrade libavdevice58Upgrade libavcodec58-64bitUpgrade libavformat58-64bitUpgrade ffmpegUpgrade libavdevice58-64bitUpgrade ffmpeg-4-libavformat-develUpgrade libavresample-develUpgrade libavfilter-develUpgrade libavformat58-32bitUpgrade libavcodec58Upgrade libpostproc55Upgrade libavfilter7Upgrade libswresample3-32bitUpgrade libpostproc54Upgrade libavutil56Upgrade ffmpeg-4-libswresample-develUpgrade libavfilter6Upgrade libavdevice58-32bitUpgrade ffmpeg-4-libpostproc-develUpgrade libavutil56-32bitUpgrade libavformat-develUpgrade ffmpeg-4-private-develUpgrade libpostproc-develUpgrade libswscale5-32bitUpgrade libswscale-develUpgrade libavcodec57Upgrade libswresample2Upgrade ffmpeg-4-libavutil-develUpgrade libavutil56-64bitUpgrade libswscale5Upgrade libswresample-develUpgrade libavresample4-64bitUpgrade libavresample4-32bitUpgrade libavutil-devel | Feb 20, 2018 | Dec 11, 2017 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Dec 12, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub