Denial Of Service (DoS) Via High CPU And Memory Consumption

FFmpeg is vulnerable to denial of service (DoS) attacks. These attacks are possible because FFmpeg does not check for an EOF (End of File) in the ivr_read_header() function of libavformat/rmdec.c. This leads to high CPU and memory consumption when a malicious IVR file with a large len field in the header but without sufficient backing data is input.