CVE-2018-1999010

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to commit cced03dd667a5df6df8fd40d8de0bff477ee02e8

Description The issue is related to a buffer data boundary reading vulnerability in the mms protocol of the FFmpeg multimedia library. Exploitation of this issue may allow a remote attacker to access confidential data, compromise data integrity, and cause a denial of service. The vulnerability can be exploited via network connectivity.

Recommendations For FFmpeg versions prior to commit cced03dd667a5df6df8fd40d8de0bff477ee02e8, update to a version that includes the fix, such as commit cced03dd667a5df6df8fd40d8de0bff477ee02e8 or later. As a temporary workaround, consider restricting network connectivity to minimize the risk of exploitation.