medium6.5
CVE-2019-14442
In mpc8_read_header in libavformat/mpc8.c in Libav 12.3, an input file can result in an avio_seek infinite loop and hang, with 100% CPU consumption.
Impact
In mpc8_read_header in libavformat/mpc8.c in Libav 12.3, an input file can result in an avio_seek infinite loop and hang, with 100% CPU consumption. Attackers could leverage this vulnerability to cause a denial of service via a crafted file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Libav | Libav | Version 12.3 |
| Debian | Debian Linux | Version 8.0 |