CVE-2018-13302
libavcodec57: In FFmpeg 4.0.1, improper handling of frame types (other than EAC3_FRAME_TYPE_INDEPENDENT) that have multiple indepen...
CVE-2018-13302 is fixed in 37 products on 1 platform, first by ffmpeg 7:3.4.4-0ubuntu0.18.04.1, released July 18, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0218
82nd percentile
In FFmpeg 4.0.1, improper handling of frame types (other than EAC3_FRAME_TYPE_INDEPENDENT) that have multiple independent substreams in the handle_eac3 function in libavformat/movenc.c may trigger an out-of-array access while converting a crafted AVI file to MPEG4, leading to a denial of service or possibly unspecified other impact.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| ffmpeg · Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | ffmpeg 7:3.4.4-0ubuntu0.18.04.1 | Jul 18, 2018 |
| ffmpeg · Ubuntu 24.10 (oracular) | 7:4.0.2-1ubuntu6 | ffmpeg 7:4.0.2-1ubuntu6 | Jan 16, 2026 |
| ffmpeg · Ubuntu 25.04 (plucky) | 7:4.0.2-1ubuntu6 | ffmpeg 7:4.0.2-1ubuntu6 | Jan 16, 2026 |
| libavcodec-extra · Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | libavcodec-extra 7:3.4.4-0ubuntu0.18.04.1 | Jul 18, 2018 |
| libavcodec-extra · Ubuntu 24.10 (oracular) | 7:4.0.2-1ubuntu6 | libavcodec-extra 7:4.0.2-1ubuntu6 | Jan 16, 2026 |
| libavcodec-extra · Ubuntu 25.04 (plucky) | 7:4.0.2-1ubuntu6 | libavcodec-extra 7:4.0.2-1ubuntu6 | Jan 16, 2026 |
| libavcodec-extra57 · Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | libavcodec-extra57 7:3.4.4-0ubuntu0.18.04.1 | Jul 18, 2018 |
| libavcodec-extra60 · Ubuntu 24.10 (oracular) | 7:4.0.2-1ubuntu6 | libavcodec-extra60 7:4.0.2-1ubuntu6 | Jan 16, 2026 |
| libavcodec-extra61 · Ubuntu 25.04 (plucky) | 7:4.0.2-1ubuntu6 | libavcodec-extra61 7:4.0.2-1ubuntu6 | Jan 16, 2026 |
| libavcodec57 · Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | libavcodec57 7:3.4.4-0ubuntu0.18.04.1 | Jul 18, 2018 |
| libavcodec60 · Ubuntu 24.10 (oracular) | 7:4.0.2-1ubuntu6 | libavcodec60 7:4.0.2-1ubuntu6 | Jan 16, 2026 |
| libavcodec61 · Ubuntu 25.04 (plucky) | 7:4.0.2-1ubuntu6 | libavcodec61 7:4.0.2-1ubuntu6 | Jan 16, 2026 |
| libavdevice57 · Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | libavdevice57 7:3.4.4-0ubuntu0.18.04.1 | Jul 18, 2018 |
| libavdevice60 · Ubuntu 24.10 (oracular) | 7:4.0.2-1ubuntu6 | libavdevice60 7:4.0.2-1ubuntu6 | Jan 16, 2026 |
| libavdevice61 · Ubuntu 25.04 (plucky) | 7:4.0.2-1ubuntu6 | libavdevice61 7:4.0.2-1ubuntu6 | Jan 16, 2026 |
| libavfilter-extra · Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | libavfilter-extra 7:3.4.4-0ubuntu0.18.04.1 | Jul 18, 2018 |
| libavfilter-extra · Ubuntu 24.10 (oracular) | 7:4.0.2-1ubuntu6 | libavfilter-extra 7:4.0.2-1ubuntu6 | Jan 16, 2026 |
| libavfilter-extra · Ubuntu 25.04 (plucky) | 7:4.0.2-1ubuntu6 | libavfilter-extra 7:4.0.2-1ubuntu6 | Jan 16, 2026 |
| libavfilter-extra10 · Ubuntu 25.04 (plucky) | 7:4.0.2-1ubuntu6 | libavfilter-extra10 7:4.0.2-1ubuntu6 | Jan 16, 2026 |
| libavfilter-extra6 · Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | libavfilter-extra6 7:3.4.4-0ubuntu0.18.04.1 | Jul 18, 2018 |
| libavfilter-extra9 · Ubuntu 24.10 (oracular) | 7:4.0.2-1ubuntu6 | libavfilter-extra9 7:4.0.2-1ubuntu6 | Jan 16, 2026 |
| libavfilter10 · Ubuntu 25.04 (plucky) | 7:4.0.2-1ubuntu6 | libavfilter10 7:4.0.2-1ubuntu6 | Jan 16, 2026 |
| libavfilter6 · Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | libavfilter6 7:3.4.4-0ubuntu0.18.04.1 | Jul 18, 2018 |
| libavfilter9 · Ubuntu 24.10 (oracular) | 7:4.0.2-1ubuntu6 | libavfilter9 7:4.0.2-1ubuntu6 | Jan 16, 2026 |
| libavformat-extra · Ubuntu 24.10 (oracular) | 7:4.0.2-1ubuntu6 | libavformat-extra 7:4.0.2-1ubuntu6 | Jan 16, 2026 |
| libavformat-extra · Ubuntu 25.04 (plucky) | 7:4.0.2-1ubuntu6 | libavformat-extra 7:4.0.2-1ubuntu6 | Jan 16, 2026 |
| libavformat-extra60 · Ubuntu 24.10 (oracular) | 7:4.0.2-1ubuntu6 | libavformat-extra60 7:4.0.2-1ubuntu6 | Jan 16, 2026 |
| libavformat-extra61 · Ubuntu 25.04 (plucky) | 7:4.0.2-1ubuntu6 | libavformat-extra61 7:4.0.2-1ubuntu6 | Jan 16, 2026 |
| libavformat57 · Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | libavformat57 7:3.4.4-0ubuntu0.18.04.1 | Jul 18, 2018 |
| libavformat60 · Ubuntu 24.10 (oracular) | 7:4.0.2-1ubuntu6 | libavformat60 7:4.0.2-1ubuntu6 | Jan 16, 2026 |
| libavformat61 · Ubuntu 25.04 (plucky) | 7:4.0.2-1ubuntu6 | libavformat61 7:4.0.2-1ubuntu6 | Jan 16, 2026 |
| libavresample3 · Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | libavresample3 7:3.4.4-0ubuntu0.18.04.1 | Jul 18, 2018 |
| libavutil55 · Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | libavutil55 7:3.4.4-0ubuntu0.18.04.1 | Jul 18, 2018 |
| libavutil58 · Ubuntu 24.10 (oracular) | 7:4.0.2-1ubuntu6 | libavutil58 7:4.0.2-1ubuntu6 | Jan 16, 2026 |
| libavutil59 · Ubuntu 25.04 (plucky) | 7:4.0.2-1ubuntu6 | libavutil59 7:4.0.2-1ubuntu6 | Jan 16, 2026 |
| libpostproc54 · Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | libpostproc54 7:3.4.4-0ubuntu0.18.04.1 | Jul 18, 2018 |
| libpostproc57 · Ubuntu 24.10 (oracular) | 7:4.0.2-1ubuntu6 | libpostproc57 7:4.0.2-1ubuntu6 | Jan 16, 2026 |
| libpostproc58 · Ubuntu 25.04 (plucky) | 7:4.0.2-1ubuntu6 | libpostproc58 7:4.0.2-1ubuntu6 | Jan 16, 2026 |
| libswresample2 · Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | libswresample2 7:3.4.4-0ubuntu0.18.04.1 | Jul 18, 2018 |
| libswresample4 · Ubuntu 24.10 (oracular) | 7:4.0.2-1ubuntu6 | libswresample4 7:4.0.2-1ubuntu6 | Jan 16, 2026 |
| libswresample5 · Ubuntu 25.04 (plucky) | 7:4.0.2-1ubuntu6 | libswresample5 7:4.0.2-1ubuntu6 | Jan 16, 2026 |
| libswscale4 · Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | libswscale4 7:3.4.4-0ubuntu0.18.04.1 | Jul 18, 2018 |
| libswscale7 · Ubuntu 24.10 (oracular) | 7:4.0.2-1ubuntu6 | libswscale7 7:4.0.2-1ubuntu6 | Jan 16, 2026 |
| libswscale8 · Ubuntu 25.04 (plucky) | 7:4.0.2-1ubuntu6 | libswscale8 7:4.0.2-1ubuntu6 | Jan 16, 2026 |