PT-2018-9279 · FFmpeg+1 · Ffmpeg+1

Publicado 2018-04-11 · Atualizado 2026-02-06 · CVE-2018-10001

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: FFmpeg versions through 3.4.2

Description: The issue allows remote attackers to cause a denial of service, specifically an out of array read, via an AVI file. This is due to a problem in the decode init function in libavcodec/utvideodec.c.

Recommendations: For versions through 3.4.2, update to a version that contains a fix for this issue to prevent the denial of service.

Correção

DoS

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

ALT-PU-2018-1929

CLEANSTART-2026-EZ98723

CLEANSTART-2026-PS82605

CLEANSTART-2026-XE32069

CVE-2018-10001

DSA-4249-1

MGASA-2018-0319

Produtos afetados

Alt Linux

Ffmpeg

Referências · 143

• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-PS82605.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-XE32069.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-PS82605 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-EZ98723.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-EZ98723 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-7751 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-1999010 · Nota
• https://osv.dev/vulnerability/CVE-2020-24020 · Nota
• https://osv.dev/vulnerability/CVE-2020-22042 · Nota
• https://osv.dev/vulnerability/CVE-2018-1999014 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-13305 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2018-13302 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2020-12284 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-1999013 · Nota
• https://osv.dev/vulnerability/CVE-2018-14395 · Nota