CVE-2018-13304: Ffmpeg

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

In libavcodec in FFmpeg 4.0.1, improper maintenance of the consistency between the context profile field and studio_profile in libavcodec may trigger an assertion failure while converting a crafted AVI file to MPEG4, leading to a denial of service, related to error_resilience.c, h263dec.c, and mpeg4videodec.c.

Affected products

• Ffmpeg Ffmpeg: version 4.0.1 only

Published 2018-07-05. Last modified 2026-06-17.