# CVE-2018-13302: libavcodec57: In FFmpeg 4.0.1, improper handling of frame types (other than EAC3_FRAME_TYPE_INDEPENDENT) that have multiple indepen...

CVE-2018-13302 is fixed in 37 products on 1 platform, first by ffmpeg 7:3.4.4-0ubuntu0.18.04.1, released July 18, 2018. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2018-13302
- Priority: Routine
- CVSS: n/a (Medium)
- EPSS: 0.0218
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Jul 5, 2018

## Description

In FFmpeg 4.0.1, improper handling of frame types (other than EAC3_FRAME_TYPE_INDEPENDENT) that have multiple independent substreams in the handle_eac3 function in libavformat/movenc.c may trigger an out-of-array access while converting a crafted AVI file to MPEG4, leading to a denial of service or possibly unspecified other impact.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | ffmpeg Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | [ffmpeg 7:3.4.4-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-ffmpeg-7-3.4.4-0ubuntu0.18.04.1.md) | Jul 18, 2018 |
| Linux | ffmpeg Ubuntu 24.10 (oracular) | 7:4.0.2-1ubuntu6 | [ffmpeg 7:4.0.2-1ubuntu6](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-ffmpeg-7-4.0.2-1ubuntu6.md) | Jan 16, 2026 |
| Linux | ffmpeg Ubuntu 25.04 (plucky) | 7:4.0.2-1ubuntu6 | [ffmpeg 7:4.0.2-1ubuntu6](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-ffmpeg-7-4.0.2-1ubuntu6.md) | Jan 16, 2026 |
| Linux | libavcodec-extra Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | [libavcodec-extra 7:3.4.4-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavcodec-extra-7-3.4.4-0ubuntu0.18.04.1.md) | Jul 18, 2018 |
| Linux | libavcodec-extra Ubuntu 24.10 (oracular) | 7:4.0.2-1ubuntu6 | [libavcodec-extra 7:4.0.2-1ubuntu6](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libavcodec-extra-7-4.0.2-1ubuntu6.md) | Jan 16, 2026 |
| Linux | libavcodec-extra Ubuntu 25.04 (plucky) | 7:4.0.2-1ubuntu6 | [libavcodec-extra 7:4.0.2-1ubuntu6](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libavcodec-extra-7-4.0.2-1ubuntu6.md) | Jan 16, 2026 |
| Linux | libavcodec-extra57 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | [libavcodec-extra57 7:3.4.4-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavcodec-extra57-7-3.4.4-0ubuntu0.18.04.1.md) | Jul 18, 2018 |
| Linux | libavcodec-extra60 Ubuntu 24.10 (oracular) | 7:4.0.2-1ubuntu6 | [libavcodec-extra60 7:4.0.2-1ubuntu6](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libavcodec-extra60-7-4.0.2-1ubuntu6.md) | Jan 16, 2026 |
| Linux | libavcodec-extra61 Ubuntu 25.04 (plucky) | 7:4.0.2-1ubuntu6 | [libavcodec-extra61 7:4.0.2-1ubuntu6](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libavcodec-extra61-7-4.0.2-1ubuntu6.md) | Jan 16, 2026 |
| Linux | libavcodec57 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | [libavcodec57 7:3.4.4-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavcodec57-7-3.4.4-0ubuntu0.18.04.1.md) | Jul 18, 2018 |
| Linux | libavcodec60 Ubuntu 24.10 (oracular) | 7:4.0.2-1ubuntu6 | [libavcodec60 7:4.0.2-1ubuntu6](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libavcodec60-7-4.0.2-1ubuntu6.md) | Jan 16, 2026 |
| Linux | libavcodec61 Ubuntu 25.04 (plucky) | 7:4.0.2-1ubuntu6 | [libavcodec61 7:4.0.2-1ubuntu6](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libavcodec61-7-4.0.2-1ubuntu6.md) | Jan 16, 2026 |
| Linux | libavdevice57 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | [libavdevice57 7:3.4.4-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavdevice57-7-3.4.4-0ubuntu0.18.04.1.md) | Jul 18, 2018 |
| Linux | libavdevice60 Ubuntu 24.10 (oracular) | 7:4.0.2-1ubuntu6 | [libavdevice60 7:4.0.2-1ubuntu6](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libavdevice60-7-4.0.2-1ubuntu6.md) | Jan 16, 2026 |
| Linux | libavdevice61 Ubuntu 25.04 (plucky) | 7:4.0.2-1ubuntu6 | [libavdevice61 7:4.0.2-1ubuntu6](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libavdevice61-7-4.0.2-1ubuntu6.md) | Jan 16, 2026 |
| Linux | libavfilter-extra Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | [libavfilter-extra 7:3.4.4-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavfilter-extra-7-3.4.4-0ubuntu0.18.04.1.md) | Jul 18, 2018 |
| Linux | libavfilter-extra Ubuntu 24.10 (oracular) | 7:4.0.2-1ubuntu6 | [libavfilter-extra 7:4.0.2-1ubuntu6](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libavfilter-extra-7-4.0.2-1ubuntu6.md) | Jan 16, 2026 |
| Linux | libavfilter-extra Ubuntu 25.04 (plucky) | 7:4.0.2-1ubuntu6 | [libavfilter-extra 7:4.0.2-1ubuntu6](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libavfilter-extra-7-4.0.2-1ubuntu6.md) | Jan 16, 2026 |
| Linux | libavfilter-extra10 Ubuntu 25.04 (plucky) | 7:4.0.2-1ubuntu6 | [libavfilter-extra10 7:4.0.2-1ubuntu6](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libavfilter-extra10-7-4.0.2-1ubuntu6.md) | Jan 16, 2026 |
| Linux | libavfilter-extra6 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | [libavfilter-extra6 7:3.4.4-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavfilter-extra6-7-3.4.4-0ubuntu0.18.04.1.md) | Jul 18, 2018 |
| Linux | libavfilter-extra9 Ubuntu 24.10 (oracular) | 7:4.0.2-1ubuntu6 | [libavfilter-extra9 7:4.0.2-1ubuntu6](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libavfilter-extra9-7-4.0.2-1ubuntu6.md) | Jan 16, 2026 |
| Linux | libavfilter10 Ubuntu 25.04 (plucky) | 7:4.0.2-1ubuntu6 | [libavfilter10 7:4.0.2-1ubuntu6](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libavfilter10-7-4.0.2-1ubuntu6.md) | Jan 16, 2026 |
| Linux | libavfilter6 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | [libavfilter6 7:3.4.4-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavfilter6-7-3.4.4-0ubuntu0.18.04.1.md) | Jul 18, 2018 |
| Linux | libavfilter9 Ubuntu 24.10 (oracular) | 7:4.0.2-1ubuntu6 | [libavfilter9 7:4.0.2-1ubuntu6](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libavfilter9-7-4.0.2-1ubuntu6.md) | Jan 16, 2026 |
| Linux | libavformat-extra Ubuntu 24.10 (oracular) | 7:4.0.2-1ubuntu6 | [libavformat-extra 7:4.0.2-1ubuntu6](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libavformat-extra-7-4.0.2-1ubuntu6.md) | Jan 16, 2026 |
| Linux | libavformat-extra Ubuntu 25.04 (plucky) | 7:4.0.2-1ubuntu6 | [libavformat-extra 7:4.0.2-1ubuntu6](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libavformat-extra-7-4.0.2-1ubuntu6.md) | Jan 16, 2026 |
| Linux | libavformat-extra60 Ubuntu 24.10 (oracular) | 7:4.0.2-1ubuntu6 | [libavformat-extra60 7:4.0.2-1ubuntu6](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libavformat-extra60-7-4.0.2-1ubuntu6.md) | Jan 16, 2026 |
| Linux | libavformat-extra61 Ubuntu 25.04 (plucky) | 7:4.0.2-1ubuntu6 | [libavformat-extra61 7:4.0.2-1ubuntu6](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libavformat-extra61-7-4.0.2-1ubuntu6.md) | Jan 16, 2026 |
| Linux | libavformat57 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | [libavformat57 7:3.4.4-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavformat57-7-3.4.4-0ubuntu0.18.04.1.md) | Jul 18, 2018 |
| Linux | libavformat60 Ubuntu 24.10 (oracular) | 7:4.0.2-1ubuntu6 | [libavformat60 7:4.0.2-1ubuntu6](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libavformat60-7-4.0.2-1ubuntu6.md) | Jan 16, 2026 |
| Linux | libavformat61 Ubuntu 25.04 (plucky) | 7:4.0.2-1ubuntu6 | [libavformat61 7:4.0.2-1ubuntu6](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libavformat61-7-4.0.2-1ubuntu6.md) | Jan 16, 2026 |
| Linux | libavresample3 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | [libavresample3 7:3.4.4-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavresample3-7-3.4.4-0ubuntu0.18.04.1.md) | Jul 18, 2018 |
| Linux | libavutil55 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | [libavutil55 7:3.4.4-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavutil55-7-3.4.4-0ubuntu0.18.04.1.md) | Jul 18, 2018 |
| Linux | libavutil58 Ubuntu 24.10 (oracular) | 7:4.0.2-1ubuntu6 | [libavutil58 7:4.0.2-1ubuntu6](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libavutil58-7-4.0.2-1ubuntu6.md) | Jan 16, 2026 |
| Linux | libavutil59 Ubuntu 25.04 (plucky) | 7:4.0.2-1ubuntu6 | [libavutil59 7:4.0.2-1ubuntu6](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libavutil59-7-4.0.2-1ubuntu6.md) | Jan 16, 2026 |
| Linux | libpostproc54 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | [libpostproc54 7:3.4.4-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpostproc54-7-3.4.4-0ubuntu0.18.04.1.md) | Jul 18, 2018 |
| Linux | libpostproc57 Ubuntu 24.10 (oracular) | 7:4.0.2-1ubuntu6 | [libpostproc57 7:4.0.2-1ubuntu6](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libpostproc57-7-4.0.2-1ubuntu6.md) | Jan 16, 2026 |
| Linux | libpostproc58 Ubuntu 25.04 (plucky) | 7:4.0.2-1ubuntu6 | [libpostproc58 7:4.0.2-1ubuntu6](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libpostproc58-7-4.0.2-1ubuntu6.md) | Jan 16, 2026 |
| Linux | libswresample2 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | [libswresample2 7:3.4.4-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libswresample2-7-3.4.4-0ubuntu0.18.04.1.md) | Jul 18, 2018 |
| Linux | libswresample4 Ubuntu 24.10 (oracular) | 7:4.0.2-1ubuntu6 | [libswresample4 7:4.0.2-1ubuntu6](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libswresample4-7-4.0.2-1ubuntu6.md) | Jan 16, 2026 |
| Linux | libswresample5 Ubuntu 25.04 (plucky) | 7:4.0.2-1ubuntu6 | [libswresample5 7:4.0.2-1ubuntu6](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libswresample5-7-4.0.2-1ubuntu6.md) | Jan 16, 2026 |
| Linux | libswscale4 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | [libswscale4 7:3.4.4-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libswscale4-7-3.4.4-0ubuntu0.18.04.1.md) | Jul 18, 2018 |
| Linux | libswscale7 Ubuntu 24.10 (oracular) | 7:4.0.2-1ubuntu6 | [libswscale7 7:4.0.2-1ubuntu6](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libswscale7-7-4.0.2-1ubuntu6.md) | Jan 16, 2026 |
| Linux | libswscale8 Ubuntu 25.04 (plucky) | 7:4.0.2-1ubuntu6 | [libswscale8 7:4.0.2-1ubuntu6](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libswscale8-7-4.0.2-1ubuntu6.md) | Jan 16, 2026 |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo