CVE-2018-6621

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

The decode_frame function in libavcodec/utvideodec.c in FFmpeg through 3.2 allows remote attackers to cause a denial of service (out of array read) via a crafted AVI file.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-125

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/102950Third Party Advisory, VDB Entry
https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/118e1b0b3370dd1c0da442901b486689efd1654bPatch, Third Party Advisory
https://github.com/FFmpeg/FFmpeg/commit/22aa37c0fedf14531783189a197542a055959b6cPatch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/01/msg00006.htmlMailing List, Third Party Advisory
https://www.debian.org/security/2018/dsa-4249Third Party Advisory
http://www.securityfocus.com/bid/102950Third Party Advisory, VDB Entry
https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/118e1b0b3370dd1c0da442901b486689efd1654bPatch, Third Party Advisory
https://github.com/FFmpeg/FFmpeg/commit/22aa37c0fedf14531783189a197542a055959b6cPatch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/01/msg00006.htmlMailing List, Third Party Advisory
https://www.debian.org/security/2018/dsa-4249Third Party Advisory

Timeline

Published: Feb 5, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-66227.1An issue was discovered that affects all producers of BIOS firmware who make a certain realistic interpretation of an obscure portion of the CVE-2018-66238.8An issue was discovered in Hola 1.79.859. An unprivileged user could modify or overwrite the executable with arbitrary code, which would be CVE-2018-66249.8OMRON NS devices 1.1 through 1.3 allow remote attackers to bypass authentication via a direct request to the .html file for a specific scree CVE-2018-66257.8In WatchDog Anti-Malware 2.74.186.150, the driver file (ZAMGUARD32.SYS) allows local users to cause a denial of service (BSOD) or possibly h CVE-2018-66267.8In Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110005.sys) allows local users to cause a denial of service (BSO CVE-2018-66277.8In WatchDog Anti-Malware 2.74.186.150, the driver file (ZAMGUARD32.SYS) allows local users to cause a denial of service (BSOD) or possibly h CVE-2018-66287.8In Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110005.sys) allows local users to cause a denial of service (BSO CVE-2018-66297.8In Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110005.sys) allows local users to cause a denial of service (BSO CVE-2018-66307.8In Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110005.sys) allows local users to cause a denial of service (BSO CVE-2018-66317.8In Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110009.sys) allows local users to cause a denial of service (BSO CVE-2018-66327.8In Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110005.sys) allows local users to cause a denial of service (BSO CVE-2018-66337.8In Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110005.sys) allows local users to cause a denial of service (BSO