CVE-2018-7557

Name of the Vulnerable Software and Affected Versions FFmpeg versions 2.8 through 3.4.2

Description The issue allows remote attackers to cause a denial of service (Out of array read) via an AVI file with crafted dimensions within chroma subsampling data. This is due to a problem in the decode init function in libavcodec/utvideodec.c.

Recommendations For FFmpeg versions 2.8 through 3.4.2, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.