CVE-2019-9718

In FFmpeg 3.2 and 4.1, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, because…

published March 12, 2019

CVSS
—
EPSS
2%
Percentile
75.1
In the wild
Unconfirmed
What it is

In FFmpeg 3.2 and 4.1, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, because ff_htmlmarkup_to_ass in libavcodec/htmlsubtitles.c has a complex format argument to sscanf.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01565 · 75.1th percentile
Published
2019-03-12T06:00Z
EPSS history
Timeline
  • 12 MAR 06:00Z
    In FFmpeg 3.2 and 4.1, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, because…
    cvelistv5