{"id":"CVE-2018-13301","details":"In FFmpeg 4.0.1, due to a missing check of a profile value before setting it, the ff_mpeg4_decode_picture_header function in libavcodec/mpeg4videodec.c may trigger a NULL pointer dereference while converting a crafted AVI file to MPEG4, leading to a denial of service.","modified":"2026-08-17T05:26:02.804900Z","published":"2018-07-05T17:29:00.373Z","related":["SUSE-SU-2019:3184-1","SUSE-SU-2019:3184-2"],"references":[{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/104675"},{"type":"FIX","url":"https://github.com/FFmpeg/FFmpeg/commit/2aa9047486dbff12d9e040f917e5f799ed2fd78b"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.ffmpeg.org/ffmpeg.git","events":[{"introduced":"e049f7c24fc6aa5fc925f860e2ad940a75cfd84f"},{"last_affected":"e049f7c24fc6aa5fc925f860e2ad940a75cfd84f"}],"database_specific":{"cpe":"cpe:2.3:a:ffmpeg:ffmpeg:4.0.1:*:*:*:*:*:*:*","extracted_events":[{"introduced":"4.0.1"},{"last_affected":"4.0.1"}],"source":"CPE_STRING"}}],"versions":["4.0.1","n4.0.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-13301.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/ffmpeg/ffmpeg","events":[{"introduced":"e049f7c24fc6aa5fc925f860e2ad940a75cfd84f"},{"last_affected":"e049f7c24fc6aa5fc925f860e2ad940a75cfd84f"},{"fixed":"2aa9047486dbff12d9e040f917e5f799ed2fd78b"}],"database_specific":{"source":["CPE_STRING","REFERENCES"],"cpe":"cpe:2.3:a:ffmpeg:ffmpeg:4.0.1:*:*:*:*:*:*:*","extracted_events":[{"introduced":"4.0.1"},{"last_affected":"4.0.1"}]}}],"versions":["4.0.1","n4.0.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-13301.json","vanir_signatures_modified":"2026-08-17T05:26:02Z","vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"68964249118775948532251749281526738610","length":4839},"id":"CVE-2018-13301-1e0bbfee","signature_type":"Function","signature_version":"v1","source":"https://github.com/ffmpeg/ffmpeg/commit/2aa9047486dbff12d9e040f917e5f799ed2fd78b","target":{"file":"libavcodec/mpeg4videodec.c","function":"ff_mpeg4_decode_picture_header"}},{"id":"CVE-2018-13301-9e4963d5","signature_type":"Line","signature_version":"v1","source":"https://github.com/ffmpeg/ffmpeg/commit/2aa9047486dbff12d9e040f917e5f799ed2fd78b","target":{"file":"libavcodec/mpeg4videodec.c"},"deprecated":false,"digest":{"line_hashes":["233299622311307785533508059681355998726","207241619994396014396558140523367239608","177435057124521766130865242719557301830","339127581168994191785220148555854764575","229408726659063287550116270476114514763","320253798208562027100910864703519299677","88108679225706113055928323335199453587","72868725193473715878547893389605945802","317379096000998379459118783259844145148","35179002168177949934239002314297127186","237666933241123373415431091878067085266","58520960334587029648049796218830436826","205988179228698167535919190029537414936","41412947436669317219508560263566516481","294639878760812995551560723967848898108","337561212011190879782893813999107266606","166539988119978690211630587722194839671","252940690963599090017371843428856661174","76021399495569760132443506007294444199","275210860503489031422508135210918469632","82227797915621386760704386022852934952","302877332129873584243634203918951947571","271904439334739552926260759328569695799"],"threshold":0.9}},{"digest":{"function_hash":"229922383581172170650712037378511838544","length":278},"id":"CVE-2018-13301-ec5d99aa","signature_type":"Function","signature_version":"v1","source":"https://github.com/ffmpeg/ffmpeg/commit/2aa9047486dbff12d9e040f917e5f799ed2fd78b","target":{"file":"libavcodec/mpeg4videodec.c","function":"mpeg4_decode_profile_level"},"deprecated":false}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}]}