PT-2018-3996 · FFmpeg+1 · Ffmpeg+1

Paul Ch · Publicado 2018-07-05 · Atualizado 2026-02-06 · CVE-2018-1999014

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to bab0716c7f4793ec42e05a5aa7e80d82a0dd4e75

Description The issue is related to an out of array access vulnerability in the MXF format demuxer, which can result in a denial of service (DoS). This can be exploited via a specially crafted MXF file provided as input. The vulnerability is related to reading beyond the valid boundaries of a data buffer.

Recommendations For versions prior to bab0716c7f4793ec42e05a5aa7e80d82a0dd4e75, update to a version that includes the fix, such as bab0716c7f4793ec42e05a5aa7e80d82a0dd4e75 or later. As a temporary workaround, consider restricting the use of MXF files or disabling the MXF format demuxer until a patch is applied. Avoid using the vulnerable MXF format demuxer with untrusted input files.

Correção

DoS

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

ALT-PU-2018-2047

BDU:2024-09056

CLEANSTART-2026-EZ98723

CLEANSTART-2026-PS82605

CLEANSTART-2026-XE32069

CVE-2018-1999014

Produtos afetados

Alt Linux

Ffmpeg

Referências · 135

• https://github.com/FFmpeg/FFmpeg/commit/bab0716c7f4793ec42e05a5aa7e80d82a0dd4e75 · Correção
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-PS82605 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-PS82605.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-EZ98723.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-EZ98723 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-XE32069.json · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-7751 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2019-1000016 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-1999014 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-1999010 · Nota
• https://osv.dev/vulnerability/CVE-2021-38291 · Nota
• https://security-tracker.debian.org/tracker/CVE-2018-1999014 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-9718 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-13304 · Nota
• https://osv.dev/vulnerability/CVE-2020-24020 · Nota