CVE-2018-14394: Ffmpeg

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

libavformat/movenc.c in FFmpeg before 4.0.2 allows attackers to cause a denial of service (application crash caused by a divide-by-zero error) with a user crafted Waveform audio file.

Affected products

• Ffmpeg Ffmpeg: before 4.0.2 (fixed in 4.0.2)

Published 2018-07-19. Last modified 2026-06-17.