# CVE-2018-7557: ffmpeg: The decode_init function in libavcodec/utvideodec.c in FFmpeg 2.8 through 3.4.2 allows remote attackers to cause a de...

CVE-2018-7557 is fixed in 14 products on 1 platform, first by ffmpeg 7:3.4.4-0ubuntu0.18.04.1, released July 18, 2018. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2018-7557
- Priority: Routine
- CVSS: n/a (Medium)
- EPSS: 0.0189
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Feb 27, 2018

## Description

The decode_init function in libavcodec/utvideodec.c in FFmpeg 2.8 through 3.4.2 allows remote attackers to cause a denial of service (Out of array read) via an AVI file with crafted dimensions within chroma subsampling data.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | ffmpeg Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | [ffmpeg 7:3.4.4-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-ffmpeg-7-3.4.4-0ubuntu0.18.04.1.md) | Jul 18, 2018 |
| Linux | libavcodec-extra Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | [libavcodec-extra 7:3.4.4-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavcodec-extra-7-3.4.4-0ubuntu0.18.04.1.md) | Jul 18, 2018 |
| Linux | libavcodec-extra57 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | [libavcodec-extra57 7:3.4.4-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavcodec-extra57-7-3.4.4-0ubuntu0.18.04.1.md) | Jul 18, 2018 |
| Linux | libavcodec57 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | [libavcodec57 7:3.4.4-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavcodec57-7-3.4.4-0ubuntu0.18.04.1.md) | Jul 18, 2018 |
| Linux | libavdevice57 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | [libavdevice57 7:3.4.4-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavdevice57-7-3.4.4-0ubuntu0.18.04.1.md) | Jul 18, 2018 |
| Linux | libavfilter-extra Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | [libavfilter-extra 7:3.4.4-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavfilter-extra-7-3.4.4-0ubuntu0.18.04.1.md) | Jul 18, 2018 |
| Linux | libavfilter-extra6 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | [libavfilter-extra6 7:3.4.4-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavfilter-extra6-7-3.4.4-0ubuntu0.18.04.1.md) | Jul 18, 2018 |
| Linux | libavfilter6 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | [libavfilter6 7:3.4.4-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavfilter6-7-3.4.4-0ubuntu0.18.04.1.md) | Jul 18, 2018 |
| Linux | libavformat57 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | [libavformat57 7:3.4.4-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavformat57-7-3.4.4-0ubuntu0.18.04.1.md) | Jul 18, 2018 |
| Linux | libavresample3 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | [libavresample3 7:3.4.4-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavresample3-7-3.4.4-0ubuntu0.18.04.1.md) | Jul 18, 2018 |
| Linux | libavutil55 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | [libavutil55 7:3.4.4-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavutil55-7-3.4.4-0ubuntu0.18.04.1.md) | Jul 18, 2018 |
| Linux | libpostproc54 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | [libpostproc54 7:3.4.4-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpostproc54-7-3.4.4-0ubuntu0.18.04.1.md) | Jul 18, 2018 |
| Linux | libswresample2 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | [libswresample2 7:3.4.4-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libswresample2-7-3.4.4-0ubuntu0.18.04.1.md) | Jul 18, 2018 |
| Linux | libswscale4 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.4-0ubuntu0.18.04.1 | [libswscale4 7:3.4.4-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libswscale4-7-3.4.4-0ubuntu0.18.04.1.md) | Jul 18, 2018 |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo