{"id":"CVE-2018-13300","details":"In FFmpeg 3.2 and 4.0.1, an improper argument (AVCodecParameters) passed to the avpriv_request_sample function in the handle_eac3 function in libavformat/movenc.c may trigger an out-of-array read while converting a crafted AVI file to MPEG4, leading to a denial of service and possibly an information disclosure.","modified":"2026-08-17T05:26:00.438676Z","published":"2018-07-05T17:29:00.313Z","related":["SUSE-SU-2018:3609-1","openSUSE-SU-2019:1066-1","openSUSE-SU-2024:10754-1"],"database_specific":{"unresolved_ranges":[{"extracted_events":[{"introduced":"9.0"},{"last_affected":"9.0"}],"source":"CPE_STRING","vendor_product":"debian:debian_linux","cpes":["cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"]}]},"references":[{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/104675"},{"type":"ADVISORY","url":"https://www.debian.org/security/2018/dsa-4249"},{"type":"FIX","url":"https://github.com/FFmpeg/FFmpeg/commit/95556e27e2c1d56d9e18f5db34d6f756f3011148"},{"type":"FIX","url":"https://github.com/FFmpeg/FFmpeg/commit/e6d3fd942f772f54ab6a5ca619cdaadef26b7702"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.ffmpeg.org/ffmpeg.git","events":[{"introduced":"e049f7c24fc6aa5fc925f860e2ad940a75cfd84f"},{"last_affected":"e049f7c24fc6aa5fc925f860e2ad940a75cfd84f"}],"database_specific":{"cpe":"cpe:2.3:a:ffmpeg:ffmpeg:4.0.1:*:*:*:*:*:*:*","extracted_events":[{"introduced":"4.0.1"},{"last_affected":"4.0.1"}],"source":"CPE_STRING"}}],"versions":["4.0.1","n4.0.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-13300.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/ffmpeg/ffmpeg","events":[{"introduced":"e049f7c24fc6aa5fc925f860e2ad940a75cfd84f"},{"last_affected":"e049f7c24fc6aa5fc925f860e2ad940a75cfd84f"},{"fixed":"95556e27e2c1d56d9e18f5db34d6f756f3011148"},{"fixed":"e6d3fd942f772f54ab6a5ca619cdaadef26b7702"}],"database_specific":{"cpe":"cpe:2.3:a:ffmpeg:ffmpeg:4.0.1:*:*:*:*:*:*:*","extracted_events":[{"introduced":"4.0.1"},{"last_affected":"4.0.1"}],"source":["CPE_STRING","REFERENCES"]}}],"versions":["4.0.1","n4.0.1"],"database_specific":{"vanir_signatures":[{"source":"https://github.com/ffmpeg/ffmpeg/commit/95556e27e2c1d56d9e18f5db34d6f756f3011148","target":{"file":"libavformat/movenc.c"},"deprecated":false,"digest":{"line_hashes":["117866465038908747555431185891226408089","99836863050707807155297261144028839057","200469054942996357998795024000550793574","3215015680887294862152352069954288076"],"threshold":0.9},"id":"CVE-2018-13300-7019f0de","signature_type":"Line","signature_version":"v1"},{"target":{"file":"libavformat/movenc.c","function":"handle_eac3"},"deprecated":false,"digest":{"function_hash":"209559010047689368178480925122595331258","length":3352},"id":"CVE-2018-13300-b3d6baef","signature_type":"Function","signature_version":"v1","source":"https://github.com/ffmpeg/ffmpeg/commit/95556e27e2c1d56d9e18f5db34d6f756f3011148"},{"target":{"file":"libavformat/movenc.c","function":"handle_eac3"},"deprecated":false,"digest":{"length":3157,"function_hash":"197538538023259506621880526769256295611"},"id":"CVE-2018-13300-f6ee3681","signature_type":"Function","signature_version":"v1","source":"https://github.com/ffmpeg/ffmpeg/commit/e6d3fd942f772f54ab6a5ca619cdaadef26b7702"},{"id":"CVE-2018-13300-ff74cb0a","signature_type":"Line","signature_version":"v1","source":"https://github.com/ffmpeg/ffmpeg/commit/e6d3fd942f772f54ab6a5ca619cdaadef26b7702","target":{"file":"libavformat/movenc.c"},"deprecated":false,"digest":{"line_hashes":["292855469144843288761289850797484581177","19871434753391898634504264980582914334","56985957617490121393762888563903618538","74301527327112639821960211212114705884"],"threshold":0.9}}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-13300.json","vanir_signatures_modified":"2026-08-17T05:26:00Z"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H"}]}