CVE-2018-13300

Name of the Vulnerable Software and Affected Versions FFmpeg versions 3.2 and 4.0.1

Description The issue arises from an improper argument (AVCodecParameters) passed to the avpriv request sample function in the handle eac3 function, potentially triggering an out-of-array read when converting a crafted AVI file to MPEG4. This could lead to a denial of service and possibly an information disclosure.

Recommendations For FFmpeg version 3.2, update to a version that includes a fix for this issue. For FFmpeg version 4.0.1, update to a version that includes a fix for this issue.