CVE-2018-7751

The svg_probe function in libavformat/img2dec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (Infinite Loop) via a cra...

Original description

The description as published by the source.

The svg_probe function in libavformat/img2dec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (Infinite Loop) via a crafted XML file.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2018-7751 ffmpeg Fixed in: 7:3.4.3-1
Ubuntu UBUNTU-CVE-2018-7751 gst-libav1.0

References

advisory securityfocus.com
advisory security.gentoo.org
patch git.ffmpeg.org