CVE-2017-14058: Ffmpeg

Medium severity, CVSS 6.5. EPSS: 2.2% chance of exploitation in the next 30 days.

In FFmpeg 2.4 and 3.3.3, the read_data function in libavformat/hls.c does not restrict reload attempts for an insufficient list, which allows remote attackers to cause a denial of service (infinite loop).

Affected products

• Ffmpeg Ffmpeg: version 3.3.3 only

Published 2017-08-31. Last modified 2026-06-17.