Medium severity6.5OSV Advisory· Published Jul 23, 2018· Updated Jun 17, 2026

CVE-2018-1999014

Description

FFmpeg before commit bab0716c7f4793ec42e05a5aa7e80d82a0dd4e75 contains an out of array access vulnerability in MXF format demuxer that can result in DoS. This attack appear to be exploitable via specially crafted MXF file which has to be provided as input. This vulnerability appears to have been fixed in bab0716c7f4793ec42e05a5aa7e80d82a0dd4e75 and later.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

FFmpeg/FfmpegOSV2 versions
N, n0.11-dev, n0.12-dev, …+ 1 more
- (no CPE)range: N, n0.11-dev, n0.12-dev, …
- (no CPE)range: < commit bab0716c7f4793ec42e05a5aa7e80d82a0dd4e75

Patches

Vulnerability mechanics

References

github.com/FFmpeg/FFmpeg/commit/bab0716c7f4793ec42e05a5aa7e80d82a0dd4e75nvdIssue TrackingPatchThird Party Advisory
www.securityfocus.com/bid/104896nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000