A stack-based buffer overflow in the subtitle decoder in... · CVE-2019-9719 · GitHub Advisory Database · GitHub

A stack-based buffer overflow in the subtitle decoder in...

Moderate severity Unreviewed Published May 24, 2022 to the GitHub Advisory Database • Updated Mar 30, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srt_to_ass in libavcodec/srtdec.c misuses snprintf.

References

Published by the National Vulnerability Database

Sep 19, 2019

Published to the GitHub Advisory Database May 24, 2022

Last updated Mar 30, 2024

Weaknesses

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow. Learn more on MITRE.

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer. Learn more on MITRE.