CVE-2019-9721

A denial of service in the subtitle decoder in FFmpeg 3.2 and 4.1 allows attackers to hog the CPU via a crafted video file in Matroska format, because…

published March 12, 2019

CVSS
—
EPSS
1%
Percentile
72.9
In the wild
Unconfirmed
What it is

A denial of service in the subtitle decoder in FFmpeg 3.2 and 4.1 allows attackers to hog the CPU via a crafted video file in Matroska format, because handle_open_brace in libavcodec/htmlsubtitles.c has a complex format argument to sscanf.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01435 · 72.9th percentile
Published
2019-03-12T06:00Z
EPSS history
Timeline
  • 12 MAR 06:00Z
    A denial of service in the subtitle decoder in FFmpeg 3.2 and 4.1 allows attackers to hog the CPU via a crafted video file in Matroska format, because…
    cvelistv5