CVE-2018-6912

Name of the Vulnerable Software and Affected Versions FFmpeg versions through 3.4.2

Description The issue is related to the decode plane function in the libavcodec/utvideodec.c component of the FFmpeg library. It allows remote attackers to cause a denial of service due to an out of array read via a crafted AVI file. The vulnerability is associated with reading beyond the valid boundaries of a data buffer, which can be exploited by a remote attacker to cause a service disruption using a specially crafted AVI file.

Recommendations For versions through 3.4.2, update to a version that contains a fix for this issue to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.