CVE-2018-6912

The decode_plane function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (out of array read) via a crafted AVI file.

References

Affected packages

Git / git.ffmpeg.org/ffmpeg.git

Affected ranges

Type

GIT

Repo

https://git.ffmpeg.org/ffmpeg.git

Events

Introduced

Last affected

6a97ba521558ce131fe839eed2d51ff745280e1d

Fixed

76cc0f0f673353cd4746cd3b83838ae335e5d9ed

Database specific

Show details

{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.4.2"
        }
    ],
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ],
    "cpe": "cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"
}

Affected versions

Other

n0.*

n0.11-dev

n0.12-dev

n0.8

n1.*

n1.1-dev

n1.2-dev

n1.3-dev

n2.*

n2.0

n2.1-dev

n2.2-dev

n2.3-dev

n2.4-dev

n2.5-dev

n2.6-dev

n2.7-dev

n2.8-dev

n2.9-dev

n3.*

n3.1-dev

n3.2-dev

n3.3-dev

n3.4

n3.4-dev

n3.4.1

n3.4.2

n3.5-dev

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-6912.json"

vanir_signatures

[
    {
        "target": {
            "file": "libavcodec/utvideodec.c"
        },
        "deprecated": false,
        "source": "https://git.ffmpeg.org/ffmpeg.git@76cc0f0f673353cd4746cd3b83838ae335e5d9ed",
        "id": "CVE-2018-6912-0144cec9",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "126380017330277159884671461560282119381",
                "42198672097611317034829738163057254364",
                "212379384477450247945758306407055061710",
                "266395693858438047475362019069030210679",
                "15828539231961845883717326886112825267",
                "77085699492300031878955430095700696808",
                "64697871263309987148936996026975922067",
                "200987957946209559743088306416595237187",
                "311851503597665917361764542649396657818",
                "283934749362922653721134136878624055339",
                "38789047353938555370091261790930327695",
                "25633269536266162720000733618601119842",
                "148947680990133917432091749613284738019",
                "71935643764249230147055731390391271316",
                "41725915022838983528510982799681476397",
                "197587323456595566875329205394415226001",
                "243973770007721439297982684827259576405",
                "331478806096199413091925366836228319490"
            ]
        },
        "signature_type": "Line"
    },
    {
        "target": {
            "function": "decode_frame",
            "file": "libavcodec/utvideodec.c"
        },
        "deprecated": false,
        "source": "https://git.ffmpeg.org/ffmpeg.git@76cc0f0f673353cd4746cd3b83838ae335e5d9ed",
        "id": "CVE-2018-6912-1ceb6e87",
        "signature_version": "v1",
        "digest": {
            "length": 9413.0,
            "function_hash": "8764344580623738098179465293813310087"
        },
        "signature_type": "Function"
    },
    {
        "target": {
            "function": "decode_plane",
            "file": "libavcodec/utvideodec.c"
        },
        "deprecated": false,
        "source": "https://git.ffmpeg.org/ffmpeg.git@76cc0f0f673353cd4746cd3b83838ae335e5d9ed",
        "id": "CVE-2018-6912-d5cbe960",
        "signature_version": "v1",
        "digest": {
            "length": 3231.0,
            "function_hash": "90160077672419751333721115763359283573"
        },
        "signature_type": "Function"
    }
]

vanir_signatures_modified

"2026-08-17T05:26:06Z"

Git / github.com/ffmpeg/ffmpeg