CVE-2018-1999013

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to commit a7e032a277452366771951e29fd0bf2bd5c029f0

Description The issue is related to a use-after-free vulnerability in the realmedia demuxer of the FFmpeg multimedia library. This vulnerability can be exploited by a remote attacker using a specially crafted RM file, potentially allowing access to confidential data by reading heap memory.

Recommendations For versions prior to commit a7e032a277452366771951e29fd0bf2bd5c029f0, update to a version that includes the fix, such as commit a7e032a277452366771951e29fd0bf2bd5c029f0 or later. As a temporary workaround, consider avoiding the use of specially crafted RM files or restricting access to the realmedia demuxer until a patch is applied.