PT-2019-13695 · FFmpeg · Libav

Published 2019-07-30 · Updated 2024-08-05 · CVE-2019-14441

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Libav version 12.3

Description An issue in Libav allows remote attackers to cause a denial of service, resulting in an application crash. This issue is related to the ff mpa synth filter float function in avcodec/mpegaudiodsp template.c.

Recommendations For Libav version 12.3, consider applying a patch or fix that addresses the access violation issue in the ff mpa synth filter float function to prevent denial of service attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2019-14441

Affected Products

Libav

References · 7

• 🔥 https://bugzilla.libav.org/show_bug.cgi?id=1161#c0 · Exploit
• https://ubuntu.com/security/CVE-2019-14441 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-14441 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-14441 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-14441 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-14441 · Security Note
• https://t.me/cvenotify/89090 · Telegram Post