Medium severity6.5NVD Advisory· Published Jun 15, 2018· Updated Jun 17, 2026
CVE-2018-12458
CVE-2018-12458
Description
An improper integer type in the mpeg4_encode_gop_header function in libavcodec/mpeg4videoenc.c in FFmpeg 2.8 and 4.0 may trigger an assertion violation while converting a crafted AVI file to MPEG4, leading to a denial of service.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- osv-coords3 versionspkg:rpm/suse/ffmpeg&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015pkg:rpm/suse/ffmpeg&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015pkg:rpm/suse/ffmpeg&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015
< 3.4.2-4.12.4+ 2 more
- (no CPE)range: < 3.4.2-4.12.4
- (no CPE)range: < 3.4.2-4.12.4
- (no CPE)range: < 3.4.2-4.12.4
Patches
Vulnerability mechanics
References
3- github.com/FFmpeg/FFmpeg/commit/6bbef938839adc55e8e048bc9cc2e0fafe2064dfnvdPatchThird Party Advisory
- github.com/FFmpeg/FFmpeg/commit/e1182fac1afba92a4975917823a5f644bee7e6e8nvdIssue TrackingPatchThird Party Advisory
- www.debian.org/security/2018/dsa-4249nvdThird Party Advisory
News mentions
0No linked articles in our index yet.