CVE Database
/

CVE-2017-14222

Back to search

CVE-2017-14222

Published: Sep 9, 2017

Modified: Aug 5, 2024

PUBLISHED

Description

In libavformat/mov.c in FFmpeg 3.3.3, a DoS in read_tfra() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted MOV file, which claims a large "item_count" field in the header but does not contain sufficient backing data, is provided, the loop would consume huge CPU and memory resources, since there is no EOF check inside the loop.

VendorProductVersions

n/a

n/a

affected
n/a

References

100701
vdb-entry
x_refsource_BID
DSA-3996
vendor-advisory
x_refsource_DEBIAN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now