CVE-2017-14171: Excessive Iteration

In libavformat/nsvdec.c in FFmpeg 2.4 and 3.3.3, a DoS in nsvparseNSVfheader due to lack of an EOF End of File check might cause huge CPU consumption. When a crafted NSV file, which claims a large "tableentriesused" field in the header but does not contain sufficient backing data, is provided, th...

CVE-2017-9051: NULL Pointer Dereference

libav before 12.1 is vulnerable to an invalid read of size 1 due to NULL pointer dereferencing in the nsvreadchunk function in libavformat/nsvdec.c...