Skip to content
Fencer Vulns
medium 6.5

CVE-2018-1999012 json

FFmpeg before commit 9807d3976be0e92e4ece3b4b1701be894cd7c2e1 contains a CWE-835: Infinite loop vulnerability in pva format demuxer that ca…

published 2018-07-23 8 y ago modified 2026-06-17 4 mo ago also EUVD-2018-10707

cvss
6.5
version 3.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
2.1%
EPSS 2.1% chance of exploitation in 30 days, percentile 82%
public exploits
0
none known

Summary

FFmpeg before commit 9807d3976be0e92e4ece3b4b1701be894cd7c2e1 contains a CWE-835: Infinite loop vulnerability in pva format demuxer that can result in a Vulnerability that allows attackers to consume excessive amount of resources like CPU and RAM. This attack appear to be exploitable via specially crafted PVA file has to be provided as input. This vulnerability appears to have been fixed in 9807d3976be0e92e4ece3b4b1701be894cd7c2e1 and later.

Patch / fix

  • ffmpeg Debian 14, Debian 13, Debian 12 7:4.0.2-1

debian advisories DEBIAN-CVE-2018-1999012

  • ffmpeg Ubuntu 16.04 LTS 7:2.8.15-0ubuntu0.16.04.1

ubuntu advisories UBUNTU-CVE-2018-1999012

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • ffmpeg SLE Workstation Extension 15, SLE Module for Desktop Applications 15 3.4.2-4.5.1

suse advisories SUSE-SU-2018:2305-1

  • ffmpeg Alpine 3.24, Alpine 3.23, Alpine 3.22 +12 more 4.0.2-r0
  • ffmpeg4 Alpine 3.22, Alpine 3.21, Alpine 3.20 +4 more 4.0.2-r0

alpine advisories ALPINE-CVE-2018-1999012

Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

Exploit prediction

2.13% chance of exploitation in the next 30 days, higher than 82% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.0 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
NVD 2.0 7.1 AV:N/AC:M/Au:N/C:N/I:N/A:C

Classification

Weakness
  • CWE-835 Loop with Unreachable Exit Condition

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.