CVE-2018-13304

In libavcodec in FFmpeg 4.0.1, improper maintenance of the consistency between the context profile field and studioprofile in libavcodec may trigger an assertion failure while converting a crafted AVI file to MPEG4, leading to a denial of service, related to errorresilience.c, h263dec.c, and mpeg4videodec.c.

References

https://github.com/FFmpeg/FFmpeg/commit/bd27a9364ca274ca97f1df6d984e88a0700fb235

Affected packages

Git / github.com/ffmpeg/ffmpeg

Affected ranges

Type

GIT

Repo

https://github.com/ffmpeg/ffmpeg

Events

Introduced

e049f7c24fc6aa5fc925f860e2ad940a75cfd84f

Last affected

e049f7c24fc6aa5fc925f860e2ad940a75cfd84f

Fixed

bd27a9364ca274ca97f1df6d984e88a0700fb235

Database specific

Show details

{
    "cpe": "cpe:2.3:a:ffmpeg:ffmpeg:4.0.1:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "4.0.1"
        },
        {
            "last_affected": "4.0.1"
        }
    ],
    "source": [
        "CPE_STRING",
        "REFERENCES"
    ]
}

Affected versions

4.*

4.0.1

n4.*

n4.0.1

Database specific

vanir_signatures_modified

"2026-08-09T14:50:26Z"

vanir_signatures

[
    {
        "id": "CVE-2018-13304-0765fbc4",
        "deprecated": false,
        "signature_type": "Function",
        "signature_version": "v1",
        "digest": {
            "length": 5080.0,
            "function_hash": "256960516352979497763493264750072747121"
        },
        "source": "https://github.com/ffmpeg/ffmpeg/commit/bd27a9364ca274ca97f1df6d984e88a0700fb235",
        "target": {
            "function": "ff_mpeg4_decode_picture_header",
            "file": "libavcodec/mpeg4videodec.c"
        }
    },
    {
        "id": "CVE-2018-13304-0b2d04cf",
        "deprecated": false,
        "signature_type": "Line",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "234220242971519639069925192106557869936",
                "27022711908485823343385637859522777500",
                "113824804767162739760492865058572335280",
                "176685197101405822231663182409326963268",
                "319033334292862973238188657249073376525",
                "68030318742953387832605123665460449578",
                "246485009616034901216726808461488667122",
                "233324347671506670096138160338818664533",
                "60668569102057270816411547209899738697",
                "137475586893726356667615291319355735297"
            ]
        },
        "source": "https://github.com/ffmpeg/ffmpeg/commit/bd27a9364ca274ca97f1df6d984e88a0700fb235",
        "target": {
            "file": "libavcodec/h263dec.c"
        }
    },
    {
        "id": "CVE-2018-13304-284d67cc",
        "deprecated": false,
        "signature_type": "Line",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "104855329741041470712311394041812037379",
                "143828900052684539514884514286086595861",
                "2647572560782318997138122158952864848",
                "278187327413586230012453164116515175637"
            ]
        },
        "source": "https://github.com/ffmpeg/ffmpeg/commit/bd27a9364ca274ca97f1df6d984e88a0700fb235",
        "target": {
            "file": "libavcodec/mpeg4videodec.c"
        }
    },
    {
        "id": "CVE-2018-13304-73e5a7c5",
        "deprecated": false,
        "signature_type": "Function",
        "signature_version": "v1",
        "digest": {
            "length": 8548.0,
            "function_hash": "167457737284877245516578506164665218397"
        },
        "source": "https://github.com/ffmpeg/ffmpeg/commit/bd27a9364ca274ca97f1df6d984e88a0700fb235",
        "target": {
            "function": "ff_h263_decode_frame",
            "file": "libavcodec/h263dec.c"
        }
    },
    {
        "id": "CVE-2018-13304-9b8e517b",
        "deprecated": false,
        "signature_type": "Line",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "186904118632056085313437771335594931583",
                "195542692870641178878293750695934548334",
                "191199028785832195646731276090440414229",
                "31494482404163330073156735702995685172",
                "85622452828627890592804615751406081224"
            ]
        },
        "source": "https://github.com/ffmpeg/ffmpeg/commit/bd27a9364ca274ca97f1df6d984e88a0700fb235",
        "target": {
            "file": "libavcodec/error_resilience.c"
        }
    },
    {
        "id": "CVE-2018-13304-d13c6196",
        "deprecated": false,
        "signature_type": "Function",
        "signature_version": "v1",
        "digest": {
            "length": 268.0,
            "function_hash": "89873299254093143675310047600901260991"
        },
        "source": "https://github.com/ffmpeg/ffmpeg/commit/bd27a9364ca274ca97f1df6d984e88a0700fb235",
        "target": {
            "function": "er_supported",
            "file": "libavcodec/error_resilience.c"
        }
    },
    {
        "id": "CVE-2018-13304-f5d2f959",
        "deprecated": false,
        "signature_type": "Function",
        "signature_version": "v1",
        "digest": {
            "length": 520.0,
            "function_hash": "165942139424180155756119199872888844144"
        },
        "source": "https://github.com/ffmpeg/ffmpeg/commit/bd27a9364ca274ca97f1df6d984e88a0700fb235",
        "target": {
            "function": "h263_get_format",
            "file": "libavcodec/h263dec.c"
        }
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-13304.json"