{"id":"CVE-2018-15822","details":"The flv_write_packet function in libavformat/flvenc.c in FFmpeg through 2.8 does not check for an empty audio packet, leading to an assertion failure.","modified":"2026-08-17T05:26:03.589063Z","published":"2018-08-23T23:29:00.247Z","related":["SUSE-SU-2018:3609-1","openSUSE-SU-2019:1066-1","openSUSE-SU-2024:10754-1"],"database_specific":{"unresolved_ranges":[{"vendor_product":"canonical:ubuntu_linux","cpes":["cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*"],"extracted_events":[{"introduced":"16.04"},{"last_affected":"16.04"},{"introduced":"18.04"},{"last_affected":"18.04"},{"introduced":"18.10"},{"last_affected":"18.10"},{"introduced":"19.04"},{"last_affected":"19.04"},{"introduced":"20.04"},{"last_affected":"20.04"}],"source":"CPE_STRING"},{"cpes":["cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.0"},{"last_affected":"8.0"},{"introduced":"9.0"},{"last_affected":"9.0"}],"source":"CPE_STRING","vendor_product":"debian:debian_linux"}]},"references":[{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2019/05/msg00043.html"},{"type":"ADVISORY","url":"https://seclists.org/bugtraq/2019/May/60"},{"type":"ADVISORY","url":"https://usn.ubuntu.com/3967-1/"},{"type":"ADVISORY","url":"https://usn.ubuntu.com/4431-1/"},{"type":"ADVISORY","url":"https://www.debian.org/security/2019/dsa-4449"},{"type":"FIX","url":"https://github.com/FFmpeg/FFmpeg/commit/6b67d7f05918f7a1ee8fc6ff21355d7e8736aa10"},{"type":"FIX","url":"https://github.com/FFmpeg/FFmpeg/commit/d8ecb335fe4852bbc172c7b79e66944d158b4d92"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.ffmpeg.org/ffmpeg.git","events":[{"introduced":"0"},{"last_affected":"58142a27ea96bf9246586a91a82db85e37646933"}],"database_specific":{"cpe":"cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"2.8"}],"source":"CPE_RANGE"}}],"versions":["n2.8-dev","n2.7-dev","n2.6-dev","n2.5-dev","n2.4-dev","n2.3-dev","n2.2-dev","n2.0","n2.1-dev","n1.3-dev","n1.2-dev","n1.1-dev","n0.12-dev","n0.11-dev","n0.8","N"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-15822.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/ffmpeg/ffmpeg","events":[{"introduced":"0"},{"last_affected":"58142a27ea96bf9246586a91a82db85e37646933"},{"fixed":"6b67d7f05918f7a1ee8fc6ff21355d7e8736aa10"},{"fixed":"d8ecb335fe4852bbc172c7b79e66944d158b4d92"}],"database_specific":{"cpe":"cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"2.8"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["n2.8.15","n4.1-dev","n2.8.14","n2.8.13","n3.5-dev","n2.8.12","n3.4-dev","n2.8.11","n2.8.10","n2.8.9","n3.3-dev","n2.8.8","n2.8.7","n3.2-dev","n3.1-dev","n2.8.6","n2.8.5","n2.8.4","n2.8.3","n2.8.2","n2.8.1","n2.8","n2.9-dev","n2.8-dev","n2.7-dev","n2.6-dev","n2.5-dev","n2.4-dev","n2.3-dev","n2.2-dev","n2.0","n2.1-dev","n1.3-dev","n1.2-dev","n1.1-dev","n0.12-dev","n0.11-dev","n0.8","N"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-15822.json","vanir_signatures_modified":"2026-08-17T05:26:03Z","vanir_signatures":[{"source":"https://github.com/ffmpeg/ffmpeg/commit/6b67d7f05918f7a1ee8fc6ff21355d7e8736aa10","target":{"file":"libavformat/flvenc.c","function":"flv_write_packet"},"deprecated":false,"digest":{"function_hash":"126605493963002243786763878397979972170","length":6210},"id":"CVE-2018-15822-61ede296","signature_type":"Function","signature_version":"v1"},{"digest":{"threshold":0.9,"line_hashes":["147193301791415461805923920078285621927","107193502165357748234612503756240350056","118428189102459771525930371230979065799"]},"id":"CVE-2018-15822-b9efedaf","signature_type":"Line","signature_version":"v1","source":"https://github.com/ffmpeg/ffmpeg/commit/d8ecb335fe4852bbc172c7b79e66944d158b4d92","target":{"file":"libavformat/flvenc.c"},"deprecated":false},{"target":{"file":"libavformat/flvenc.c","function":"flv_write_packet"},"deprecated":false,"digest":{"function_hash":"130541370860603874332054497531241140893","length":4678},"id":"CVE-2018-15822-d9e7c24d","signature_type":"Function","signature_version":"v1","source":"https://github.com/ffmpeg/ffmpeg/commit/d8ecb335fe4852bbc172c7b79e66944d158b4d92"},{"digest":{"line_hashes":["58527666524190152415447120377244757107","62013923509066486281990892171178753293","334080227211384791118196996465674911099"],"threshold":0.9},"id":"CVE-2018-15822-ff0209f6","signature_type":"Line","signature_version":"v1","source":"https://github.com/ffmpeg/ffmpeg/commit/6b67d7f05918f7a1ee8fc6ff21355d7e8736aa10","target":{"file":"libavformat/flvenc.c"},"deprecated":false}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}