PT-2018-9279 · FFmpeg+1 · Ffmpeg+1

Published 2018-04-11 · Updated 2026-02-06 · CVE-2018-10001

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: FFmpeg versions through 3.4.2

Description: The issue allows remote attackers to cause a denial of service, specifically an out of array read, via an AVI file. This is due to a problem in the decode init function in libavcodec/utvideodec.c.

Recommendations: For versions through 3.4.2, update to a version that contains a fix for this issue to prevent the denial of service.

Fix

DoS

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALT-PU-2018-1929

CLEANSTART-2026-EZ98723

CLEANSTART-2026-PS82605

CLEANSTART-2026-XE32069

CVE-2018-10001

DSA-4249-1

MGASA-2018-0319

Affected Products

Alt Linux

Ffmpeg

References · 143

• https://nvd.nist.gov/vuln/detail/CVE-2018-7751 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-13305 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-13302 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-12284 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-17542 · Security Note
• https://debian.org/security/2018/dsa-4249 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-9841 · Security Note
• https://advisories.mageia.org/MGASA-2018-0319.html · Security Note
• https://osv.dev/vulnerability/MGASA-2018-0319 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-4249-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-22015 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-38171 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-38114 · Security Note
• https://osv.dev/vulnerability/CLEANSTART-2026-PS82605 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-13303 · Security Note