CVE-2019-9717
19.09.2019, 21:15
In Libav 12.3, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, because srt_to_ass in libavcodec/srtdec.c has a complex format argument to sscanf.Enginsight
| Vendor | Product | Version |
|---|---|---|
| libav | libav | 𝑥 ≤ 12.3 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ffmpeg |
| ||||||||||||||||||||||||||||
| gst-libav1.0 |
| ||||||||||||||||||||||||||||
| qtwebengine-opensource-src |
| ||||||||||||||||||||||||||||
| vice |
|