CVE-2019-9720
A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt...
CVE-2019-9720 is a medium vulnerability (CVSS 6.5) in Libav, published September 19, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.09%, the 65th percentile. No source names a fixed version.
- Severity
- 6.5 MediumCVSS 3.1, NVD
- Exploit chance
- 1.09%EPSS, 65th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srt_to_ass in libavcodec/srtdec.c misuses snprintf.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gst-libav1.0Ubuntu:16.04:LTS | All versions, plus listed versions 1.6.0-11.6.0-21.6.1-11.6.2-11.7.1-1 Show 7 moreShow less1.7.2-11.7.90-11.8.0-11.8.1-1~ubuntu11.8.2-1~ubuntu11.8.3-1ubuntu0.11.8.3-1ubuntu0.2 | None known |
gst-libav1.0Ubuntu:18.04:LTS | All versions, plus listed versions 1.12.2-11.12.3-11.12.4-11.13.91-11.14.0-11.14.1-1~ubuntu18.04.11.14.4-0ubuntu1~ubuntu18.04.11.14.5-0ubuntu1~18.04.1 | None known |
qtwebengine-opensource-srcUbuntu:Pro:18.04:LTS | All versions, plus listed versions 5.9.1+dfsg-45.9.1+dfsg-4ubuntu15.9.2+dfsg-2ubuntu15.9.3+dfsg-0ubuntu15.9.4+dfsg-0ubuntu15.9.5+dfsg-0ubuntu25.9.5+dfsg-0ubuntu2+esm1 | None known |
gst-libav1.0Ubuntu:20.04:LTS | All versions, plus listed versions 1.16.1-11.16.2-11.16.2-2 | None known |
qtwebengine-opensource-srcUbuntu:Pro:20.04:LTS | All versions, plus listed versions 5.12.4+dfsg-1ubuntu15.12.4+dfsg-1ubuntu35.12.5+dfsg-3ubuntu15.12.5+dfsg-6ubuntu25.12.5+dfsg-7 Show 4 moreShow less5.12.5+dfsg-7build15.12.8+dfsg-0ubuntu15.12.8+dfsg-0ubuntu1.15.12.8+dfsg-0ubuntu1.1+esm1 | None known |
gst-libav1.0Ubuntu:22.04:LTS | All versions, plus listed versions 1.18.5-11.20.0-11.20.1-11.20.3-0ubuntu1 | None known |
qtwebengine-opensource-srcUbuntu:Pro:22.04:LTS | All versions, plus listed versions 5.15.6+dfsg-15.15.6+dfsg-25.15.7+dfsg-25.15.8+dfsg-15.15.8+dfsg-1build1 Show 4 moreShow less5.15.8+dfsg-1build25.15.8+dfsg-25.15.9+dfsg-15.15.9+dfsg-1ubuntu0.1~esm1 | None known |
gst-libav1.0Ubuntu:24.04:LTS | All versions, plus listed versions 1.22.5-11.22.6-11.22.7-11.22.8-11.22.10-11.24.1-11.24.1-1build1 | None known |
qtwebengine-opensource-srcUbuntu:Pro:24.04:LTS | All versions, plus listed versions 5.15.15+dfsg-25.15.15+dfsg-2build25.15.15+dfsg-2ubuntu15.15.16+dfsg-15.15.16+dfsg-1ubuntu25.15.16+dfsg-1ubuntu45.15.16+dfsg-35.15.16+dfsg-3ubuntu0.1~esm1 | None known |
gst-libav1.0Ubuntu:25.10 | All versions, plus listed versions 1.26.0-11.26.1-11.26.2-11.26.3-11.26.4-11.26.5-11.26.6-1 | None known |
Show 5 moreShow less
| Package | Affected | Fixed |
|---|---|---|
qtwebengine-opensource-srcUbuntu:25.10 | All versions, plus listed versions 5.15.18+dfsg-25.15.18+dfsg-2build15.15.19+dfsg-15.15.19+dfsg2-1 | None known |
gst-libav1.0Ubuntu:26.10 | All versions, plus listed versions 1.28.2-11.28.3-11.28.4-1build11.28.5-11.28.6-11.28.7-1 | None known |
qtwebengine-opensource-srcUbuntu:26.10 | All versions, plus listed versions 5.15.19+dfsg2-45.15.19+dfsg2-65.15.19+dfsg2-7 | None known |
gst-libav1.0Ubuntu:26.04:LTS | All versions, plus listed versions 1.26.6-11.27.2-11.27.2-1build11.27.90-11.28.0-11.28.1-11.28.2-1 | None known |
qtwebengine-opensource-srcUbuntu:Pro:26.04:LTS | All versions, plus listed versions 5.15.19+dfsg2-15.15.19+dfsg2-1build15.15.19+dfsg2-25.15.19+dfsg2-35.15.19+dfsg2-45.15.19+dfsg2-4ubuntu0.1~esm1 | None known |
What each source reports
NVD Score used
A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srt_to_ass in libavcodec/srtdec.c misuses snprintf.
- Record
CVE-2019-9720- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS 2.0
- 7.1 High
AV:N/AC:M/Au:N/C:N/I:N/A:C - Weakness
- CWE-787
- Updated
- 2026-11-02
CVE ListNo score
A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srt_to_ass in libavcodec/srtdec.c misuses snprintf.
- Record
CVE-2019-9720- Updated
- 2026-11-02
EUVDEUVD-2019-19085No score
A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srt_to_ass in libavcodec/srtdec.c misuses snprintf.
- Record
EUVD-2019-19085- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9p94-wjcw-v5mmNo score
A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt...
A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srt_to_ass in libavcodec/srtdec.c misuses snprintf.
- Record
GHSA-9p94-wjcw-v5mm- Weakness
- CWE-120
- Updated
- 2026-11-02
OSV
A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srt_to_ass in libavcodec/srtdec.c misuses snprintf.
- Record
CVE-2019-9720- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2019-9720
A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srt_to_ass in libavcodec/srtdec.c misuses snprintf.
- Record
UBUNTU-CVE-2019-9720- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.