CVE-2019-9720
19.09.2019, 21:15
A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srt_to_ass in libavcodec/srtdec.c misuses snprintf.Enginsight
| Vendor | Product | Version |
|---|---|---|
| libav | libav | 𝑥 ≤ 12.3 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ffmpeg |
| ||||||||||||||||||||||||||||
| gst-libav1.0 |
| ||||||||||||||||||||||||||||
| qtwebengine-opensource-src |
| ||||||||||||||||||||||||||||
| vice |
|
Common Weakness Enumeration