Denial Of Service (DoS) Through CPU Consumption

FFmpeg is vulnerable to denial of service DoS attacks. A malicious user can pass a NSV with a large tableentriesused header field to cause a big loop that can consume large amounts of CPU resources...

CVE-2017-14171

In libavformat/nsvdec.c in FFmpeg 2.4 and 3.3.3, a DoS in nsvparseNSVfheader due to lack of an EOF End of File check might cause huge CPU consumption. When a crafted NSV file, which claims a large "tableentriesused" field in the header but does not contain sufficient backing data, is provided, th...