Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4988
HistorySep 04, 2017 - 2:07 a.m.

Denial Of Service (DoS) Via High CPU And Memory Consumption

2017-09-0402:07:12
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

0.002 Low

EPSS

Percentile

57.7%

FFmpeg is vulnerable to denial of service (DoS) attacks. These attacks are possible because FFmpeg does not check for an EOF (End of File) in the rl2_read_header() function of libavformat/rl2.c. This leads to high CPU and memory consumption when a malicious RL2 file with a large frame_count field in the header but without sufficient backing data is input.