CVE-2018-14395

libavformat/movenc.c in FFmpeg 3.2 and 4.0.2 allows attackers to cause a denial of service (application crash caused by a divide-by-zero error) with a user crafted audio file when converting to the MOV audio format.

• CWE-369

• http://www.securitytracker.com/id/1041394Third Party Advisory, VDB Entry
• https://github.com/FFmpeg/FFmpeg/commit/2c0e98a0b478284bdff6d7a4062522605a8beae5Patch, Third Party Advisory
• https://github.com/FFmpeg/FFmpeg/commit/fa19fbcf712a6a6cc5a5cfdc3254a97b9bce6582Patch, Third Party Advisory
• https://www.debian.org/security/2018/dsa-4258Third Party Advisory
• http://www.securitytracker.com/id/1041394Third Party Advisory, VDB Entry
• https://github.com/FFmpeg/FFmpeg/commit/2c0e98a0b478284bdff6d7a4062522605a8beae5Patch, Third Party Advisory
• https://github.com/FFmpeg/FFmpeg/commit/fa19fbcf712a6a6cc5a5cfdc3254a97b9bce6582Patch, Third Party Advisory
• https://www.debian.org/security/2018/dsa-4258Third Party Advisory

Published

Jul 19, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-14387An issue was discovered in WonderCMS before 2.5.2. An attack…
• CVE-2018-14388joyplus-cms 1.6.0 has XSS via the manager/admin_ajax.php can…
• CVE-2018-14389joyplus-cms 1.6.0 has SQL Injection via the manager/admin_aj…
• CVE-2018-1439IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 …5.4
• CVE-2018-14392The New Threads plugin before 1.2 for MyBB has XSS.
• CVE-2018-14394libavformat/movenc.c in FFmpeg before 4.0.2 allows attackers…
• CVE-2018-14396An issue was discovered in Creme CRM 1.6.12. The salesman cr…
• CVE-2018-14397An issue was discovered in Creme CRM 1.6.12. The organizatio…
• CVE-2018-14398An issue was discovered in Creme CRM 1.6.12. The value of th…
• CVE-2018-14399libs\classes\attachment.class.php in PHPCMS 9.6.0 allows rem…
• CVE-2018-1440IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 …5.4
• CVE-2018-14400Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…