CVE-2019-9718

2019-03-1209:29:00

Debian Security Bug Tracker

security-tracker.debian.org

0.004 Low

EPSS

Percentile

75.0%

JSON

In FFmpeg 3.2 and 4.1, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, because ff_htmlmarkup_to_ass in libavcodec/htmlsubtitles.c has a complex format argument to sscanf.

OSVersionArchitecturePackageVersionFilename
Debian12allffmpeg< 7:4.1.3-1ffmpeg_7:4.1.3-1_all.deb
Debian11allffmpeg< 7:4.1.3-1ffmpeg_7:4.1.3-1_all.deb
Debian10allffmpeg< 7:4.1.3-1ffmpeg_7:4.1.3-1_all.deb
Debian999allffmpeg< 7:4.1.3-1ffmpeg_7:4.1.3-1_all.deb
Debian13allffmpeg< 7:4.1.3-1ffmpeg_7:4.1.3-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	ffmpeg	< 7:4.1.3-1	ffmpeg_7:4.1.3-1_all.deb
Debian	11	all	ffmpeg	< 7:4.1.3-1	ffmpeg_7:4.1.3-1_all.deb
Debian	10	all	ffmpeg	< 7:4.1.3-1	ffmpeg_7:4.1.3-1_all.deb
Debian	999	all	ffmpeg	< 7:4.1.3-1	ffmpeg_7:4.1.3-1_all.deb
Debian	13	all	ffmpeg	< 7:4.1.3-1	ffmpeg_7:4.1.3-1_all.deb

0.004 Low

EPSS

Percentile

75.0%

JSON

Related for DEBIANCVE:CVE-2019-9718