Lucene search
K

59 matches found

OSV
OSV
added 2025/10/19 7:8 p.m.1 views

JLSEC-2025-102 In FFmpeg 3.2 and 4.1, a denial of service in the subtitle decoder allows attackers to hog the CPU v...

In FFmpeg 3.2 and 4.1, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, because ffhtmlmarkuptoass in libavcodec/htmlsubtitles.c has a complex format argument to sscanf...

6.5CVSS6.7AI score0.01585EPSS
Exploits0References6
OSV
OSV
added 2025/10/19 7:8 p.m.2 views

JLSEC-2025-103 A denial of service in the subtitle decoder in FFmpeg 3.2 and 4.1 allows attackers to hog the CPU vi...

A denial of service in the subtitle decoder in FFmpeg 3.2 and 4.1 allows attackers to hog the CPU via a crafted video file in Matroska format, because handleopenbrace in libavcodec/htmlsubtitles.c has a complex format argument to sscanf...

6.5CVSS6.7AI score0.00498EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2019-19086

Malware in sbrugna...

6.5CVSS6.5AI score0.00498EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2019-19082

Malware in sbrugna...

7.1CVSS6.4AI score0.00258EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2011-3467

Malware in sbrugna...

9.3CVSS6AI score0.04725EPSS
Exploits0References12
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-19085

Malware in sbrugna...

7.1CVSS6.4AI score0.00295EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2019-9717

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Libav 12.3, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, because srttoass in...

7.1CVSS6.6AI score0.00258EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2019-9720

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because...

7.1CVSS6.9AI score0.00295EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/05/22 10:23 a.m.3 views

CVE-2019-9720

A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srttoass in libavcodec/srtdec.c misuses snprintf...

7.1CVSS7.2AI score0.00295EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 9:18 a.m.3 views

CVE-2019-9719

A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srttoass in libavcodec/srtdec.c misuses snprintf. NOTE: Third parties dispute that this is a vulnerability because “no evidence of a...

8.8CVSS7.4AI score0.00516EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:50 a.m.3 views

CVE-2019-9717

In Libav 12.3, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, because srttoass in libavcodec/srtdec.c has a complex format argument to sscanf...

7.1CVSS6.6AI score0.00258EPSS
Exploits1References1
SUSE CVE
SUSE CVE
added 2023/02/15 4:14 a.m.1 views

SUSE CVE-2019-9721

A denial of service in the subtitle decoder in FFmpeg 3.2 and 4.1 allows attackers to hog the CPU via a crafted video file in Matroska format, because handleopenbrace in libavcodec/htmlsubtitles.c has a complex format argument to sscanf...

4.3CVSS6.7AI score0.00498EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2021/09/04 12:0 a.m.28 views

openSUSE 15 Security Update : ffmpeg (openSUSE-SU-2021:2919-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:2919-1 advisory. - A denial of service in the subtitle decoder in FFmpeg 3.2 and 4.1 allows attackers to hog the CPU via a crafted video file in Matroska...

9.3CVSS6.6AI score0.01553EPSS
Exploits6References25
OSV
OSV
added 2021/08/10 6:15 p.m.0 views

CVE-2021-38382

Live555 through 1.08 does not handle Matroska and Ogg files properly. Sending two successive RTSP SETUP commands for the same track causes a Use-After-Free and daemon crash...

6.5CVSS5.8AI score
Exploits0References2
Veracode
Veracode
added 2020/06/03 4:7 a.m.30 views

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service. An attacker is able to hog the CPU via a malicious video file in Matroska format as the handleopenbrace function in libavcodec/htmlsubtitles.c has a complex format argument to sscanf...

6.5CVSS2.7AI score0.00498EPSS
Exploits0References4Affected Software1
Veracode
Veracode
added 2020/06/03 4:7 a.m.27 views

Denial Of Service (DoS)

ffmpeg is vulnerable to denial of service. An attacker is able to cause excessive CPU consumption via a malicious video file in Matroska format as the ffhtmlmarkuptoass in libavcodec/htmlsubtitles.c has a complex format argument to sscanf...

6.5CVSS4.1AI score0.01585EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2019/09/19 9:15 p.m.2 views

CVE-2019-9719

A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srttoass in libavcodec/srtdec.c misuses snprintf. NOTE: Third parties dispute that this is a vulnerability because “no evidence of a...

8.8CVSS8.7AI score
Exploits0References4
NVD
NVD
added 2019/09/19 9:15 p.m.7 views

CVE-2019-9720

A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srttoass in libavcodec/srtdec.c misuses snprintf...

7.1CVSS6.5AI score0.00295EPSS
Exploits1References2
NVD
NVD
added 2019/09/19 9:15 p.m.9 views

CVE-2019-9717

In Libav 12.3, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, because srttoass in libavcodec/srtdec.c has a complex format argument to sscanf...

7.1CVSS6.3AI score0.00258EPSS
Exploits1References2
NVD
NVD
added 2019/09/19 9:15 p.m.9 views

CVE-2019-9719

A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srttoass in libavcodec/srtdec.c misuses snprintf. NOTE: Third parties dispute that this is a vulnerability because “no evidence of a...

8.8CVSS8.8AI score0.00516EPSS
Exploits1References4
Rows per page
Query Builder