FFmpeg 4.0.1
Approved changes feed: RSS · Atom
cpe:2.3:a:ffmpeg:ffmpeg:4.0.1:*:*:*:*:*:*:*
part: a version: 4.0.1 update: *
| Vendor | Ffmpeg (4a8454a9-7e7a-5dff-9bf8-e8d1aa1a4a2f) |
|---|---|
| Product | Ffmpeg (69475a2d-e046-5b0f-b6da-299c42a85e87) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/ffmpeg |
purl2cpe | 2026-06-01 10:12:29.448739 |
pkg:deb/ubuntu/ffmpeg |
purl2cpe | 2026-06-01 10:12:29.448740 |
pkg:ffmpeg/ffmpeg |
purl2cpe | 2026-06-01 10:12:29.448742 |
pkg:github/ffmpeg/ffmpeg |
purl2cpe | 2026-06-01 10:12:29.448743 |
pkg:opensuse/ffmpeg |
purl2cpe | 2026-06-01 10:12:29.448744 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-13305 |
vulnerable | 2026-06-08 05:10:51.136854 |
Details available
In FFmpeg 4.0.1, due to a missing check for negative values of the mquant variable, the vc1_put_blocks_clamped function in libavcodec/vc1_block.c may trigger an out-of-array access while converting a crafted AVI file to MPEG4, leading to an information disclosure or a denial of service.
Published: 2018-07-05T17:00:00.000Z
Updated: 2024-08-05T09:00:35.134Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13304 |
vulnerable | 2026-06-08 05:10:51.136561 |
Details available
In libavcodec in FFmpeg 4.0.1, improper maintenance of the consistency between the context profile field and studio_profile in libavcodec may trigger an assertion failure while converting a crafted AVI file to MPEG4, leading to a denial of service, related to error_resilience.c, h263dec.c, and mpeg4videodec.c.
Published: 2018-07-05T17:00:00.000Z
Updated: 2024-08-05T09:00:34.496Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13303 |
vulnerable | 2026-06-08 05:10:51.136193 |
Details available
In FFmpeg 4.0.1, a missing check for failure of a call to init_get_bits8() in the avpriv_ac3_parse_header function in libavcodec/ac3_parser.c may trigger a NULL pointer dereference while converting a crafted AVI file to MPEG4, leading to a denial of service.
Published: 2018-07-05T17:00:00.000Z
Updated: 2024-08-05T09:00:34.688Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13302 |
vulnerable | 2026-06-08 05:10:51.135758 |
Details available
In FFmpeg 4.0.1, improper handling of frame types (other than EAC3_FRAME_TYPE_INDEPENDENT) that have multiple independent substreams in the handle_eac3 function in libavformat/movenc.c may trigger an out-of-array access while converting a crafted AVI file to MPEG4, leading to a denial of service or possibly unspecified other impact.
Published: 2018-07-05T17:00:00.000Z
Updated: 2024-08-05T09:00:34.399Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13301 |
vulnerable | 2026-06-08 05:10:51.135299 |
Details available
In FFmpeg 4.0.1, due to a missing check of a profile value before setting it, the ff_mpeg4_decode_picture_header function in libavcodec/mpeg4videodec.c may trigger a NULL pointer dereference while converting a crafted AVI file to MPEG4, leading to a denial of service.
Published: 2018-07-05T17:00:00.000Z
Updated: 2024-08-05T09:00:35.144Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13300 |
vulnerable | 2026-06-08 05:10:51.134865 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.