CVE-2019-9718: Medium severity FFmpeg FFmpeg vulnerability
In FFmpeg 3.2 and 4.1, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, because ffhtmlmarkuptoass in libavcodec/htmlsubtitles.c has a complex format argument to sscanf.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for the FFmpeg vulnerability?
The vulnerability ID for the FFmpeg vulnerability is CVE-2019-9718.
What is the severity of CVE-2019-9718?
The severity of CVE-2019-9718 is medium (CVSS score: 6.5).
How does the vulnerability in FFmpeg 3.2 and 4.1 affect the CPU?
The vulnerability in FFmpeg 3.2 and 4.1 allows attackers to hog the CPU via a crafted video file in Matroska format.
Which versions of FFmpeg are affected by CVE-2019-9718?
FFmpeg versions 3.2 and 4.1 are affected by CVE-2019-9718.
Where can I find more information about CVE-2019-9718?
You can find more information about CVE-2019-9718 at the following references: [1](http://www.securityfocus.com/bid/107382), [2](https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/1f00c97bc3475c477f3c468cf2d924d5761d0982), [3](https://github.com/FFmpeg/FFmpeg/commit/23ccf3cabb4baf6e8af4b1af3fcc59c904736f21).