CVE-2017-14171

CVE-2017-14171 is a denial-of-service in FFmpeg’s NSV header parsing (libavformat/nsvdec.c) caused by a missing EOF check in nsv_parse_NSVf_header(). A crafted NSV file misreports table_entries_used in the header but lacks backing data, causing the loop over table_entries_used to consume excessiv...

CVE-2017-9051

libav before 12.1 is vulnerable to an invalid read of size 1 due to NULL pointer dereferencing in the nsvreadchunk function in libavformat/nsvdec.c...

CVE-2017-9051

libav before 12.1 is vulnerable to an invalid read of size 1 due to NULL pointer dereferencing in the nsvreadchunk function in libavformat/nsvdec.c...

Out-of-bounds

nsvdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service out-of-bounds read and write via a crafted NSV file that triggers "us...