CVE-2018-7751

The svg_probe function in libavformat/img2dec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (Infinite Loop) via a crafted XML file.

References

Affected packages

Git / git.ffmpeg.org/ffmpeg.git

Affected ranges

Type

GIT

Repo

https://git.ffmpeg.org/ffmpeg.git

Events

Introduced

Last affected

6a97ba521558ce131fe839eed2d51ff745280e1d

Fixed

a6cba062051f345e8ebfdff34aba071ed73d923f

Database specific

Show details

{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.4.2"
        }
    ],
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ],
    "cpe": "cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"
}

Affected versions

Other

n0.*

n0.11-dev

n0.12-dev

n0.8

n1.*

n1.1-dev

n1.2-dev

n1.3-dev

n2.*

n2.0

n2.1-dev

n2.2-dev

n2.3-dev

n2.4-dev

n2.5-dev

n2.6-dev

n2.7-dev

n2.8-dev

n2.9-dev

n3.*

n3.1-dev

n3.2-dev

n3.3-dev

n3.4

n3.4-dev

n3.4.1

n3.4.2

n3.5-dev

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-7751.json"

vanir_signatures

[
    {
        "target": {
            "file": "libavformat/img2dec.c"
        },
        "deprecated": false,
        "source": "https://git.ffmpeg.org/ffmpeg.git@a6cba062051f345e8ebfdff34aba071ed73d923f",
        "id": "CVE-2018-7751-47ff4138",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "51480934028706569137540851063926966275",
                "246260889648294370373683109561074945037",
                "221935431720896810710426721799865788535",
                "171506879699555322012786006457279516114",
                "12036276942488179804786689822310971463",
                "14693681718767764540431231953573766187",
                "96060903717426694124231547707239978410",
                "14179450000172796848853960690581659246"
            ]
        },
        "signature_type": "Line"
    },
    {
        "target": {
            "function": "svg_probe",
            "file": "libavformat/img2dec.c"
        },
        "deprecated": false,
        "source": "https://git.ffmpeg.org/ffmpeg.git@a6cba062051f345e8ebfdff34aba071ed73d923f",
        "id": "CVE-2018-7751-640c52a3",
        "signature_version": "v1",
        "digest": {
            "length": 361.0,
            "function_hash": "25096092068586504689822727849037122433"
        },
        "signature_type": "Function"
    }
]

vanir_signatures_modified

"2026-08-17T05:41:04Z"

Git / github.com/ffmpeg/ffmpeg