Unrated

A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format,...

CVE-2019-9720 First seen on SecPulse Sep 20, 2019

Fix status by distribution

Fixed packages published by each distribution for this CVE

Ubuntu UBUNTU-CVE-2019-9720 gst-libav1.0

Original description The description as published by the source.

A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srt_to_ass in libavcodec/srtdec.c misuses snprintf.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory lgtm.com
report github.com

Key facts

Severity: Unrated
Published: Sep 20, 2019
First seen on SecPulse: Sep 20, 2019

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:51