Medium severity6.5NVD Advisory· Published Sep 19, 2019· Updated Jun 17, 2026

CVE-2019-9720

Description

A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srt_to_ass in libavcodec/srtdec.c misuses snprintf.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Libav/Libav2 versions
cpe:2.3:a:libav:libav:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:libav:libav:*:*:*:*:*:*:*:*range: <=12.3
- (no CPE)range: =12.3
Libav/Libavdescription

Patches

Vulnerability mechanics

References

github.com/libav/libav/blob/df744e3cf66548c9167ea857104a29d2ea92819e/libavcodec/srtdec.cnvdExploitThird Party Advisory
lgtm.com/security/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000