CVE-2018-13305

CVE-2018-13305

In FFmpeg 4.0.1, due to a missing check for negative values of the mquant variable, the vc1_put_blocks_clamped function in libavcodec/vc1_block.c may trigger an out-of-array access while converting a crafted AVI file to MPEG4, leading to an information disclosure or a denial of service.

CVE-2018-13305

In FFmpeg 4.0.1, due to a missing check for negative values of the mqu ...

GHSA-hj8w-74cf-p23x

In FFmpeg 4.0.1, due to a missing check for negative values of the mquant variable, the vc1_put_blocks_clamped function in libavcodec/vc1_block.c may trigger an out-of-array access while converting a crafted AVI file to MPEG4, leading to an information disclosure or a denial of service.

SUSE-SU-2018:3609-1

Security update for ffmpeg

openSUSE-SU-2020:0024-1

Security update for ffmpeg-4