CVE-2019-9720 - A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srt_to_ass in libavcodec/srtdec.c misuses snprintf

Back Back to CVE browser

MEDIUM

A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srt_to_ass in libavcodec/srtdec.c misuses snprintf

Published Sep 19, 2019

6.5

MEDIUM

CVSS 3.1

EPSS 1.09%

Description

A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srt_to_ass in libavcodec/srtdec.c misuses snprintf.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (2)

https://github.com/libav/libav/blob/df744e3cf66548c9167ea857104a29d2ea92819e/libavcodec/srtdec.c#L161
x_refsource_MISCExploitThird Party Advisory
https://lgtm.com/security/
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://github.com/libav/libav/blob/df744e3cf66548c9167ea857104a29d2ea92819e/libavcodec/srtdec.c#L161		x_refsource_MISCExploitThird Party Advisory
https://lgtm.com/security/		x_refsource_MISCThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Sep 19, 2019

Updated Aug 4, 2024

Reserved Mar 12, 2019

Link CVE-2019-9720

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-9720

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-9720