CVE-2018-6912

N/A

Description

The decode_plane function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (out of array read) via a crafted AVI file.

CVE Details

CVSS v3.1 ScoreN/A

Published2/12/2018

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

ffmpeg:ffmpeg

Weaknesses (CWE)

CWE-125

References

https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/76cc0f0f673353cd4746cd3b83838ae335e5d9ed(cve@mitre.org)

https://security.gentoo.org/glsa/202003-65(cve@mitre.org)

https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/76cc0f0f673353cd4746cd3b83838ae335e5d9ed(af854a3a-2127-422b-91ae-364da2661108)

https://security.gentoo.org/glsa/202003-65(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.