Vulnerabilities > CVE-2018-13304 - Reachable Assertion vulnerability in Ffmpeg 4.0.1
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
HIGH Summary
In libavcodec in FFmpeg 4.0.1, improper maintenance of the consistency between the context profile field and studio_profile in libavcodec may trigger an assertion failure while converting a crafted AVI file to MPEG4, leading to a denial of service, related to error_resilience.c, h263dec.c, and mpeg4videodec.c.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |