CVE-2018-14394 (NVD)

2018-07-19

libavformat/movenc.c in FFmpeg before 4.0.2 allows attackers to cause a denial of service (application crash caused by a divide-by-zero error) with a user crafted Waveform audio file.

Products Ffmpeg
Type Divide By Zero (CWE-369)
First patch https://github.com/FFmpeg/FFmpeg/commit/3a2d21bc5f97aa0161db3ae731fc2732be6108b8
Relevant file/s ./libavformat/movenc.c (modified, +5)
Links https://lists.debian.org/debian-lts-announce/2019/01/msg00006.html

FFmpeg - Tree: 3a2d21bc5f

(? files)

Filter Settings
Files
Navigation
Patch data:

(on by default)


Patched area: