CVE-2017-14223: In libavformat/asfdec_f.c in FFmpeg 3.3.3, a DoS in asf_build_simple_index() due to lack of an EOF (End of...

Security readout for executives and security teams

This flaw can make a vulnerable media parser spend excessive CPU and memory on a malicious ASF media file. The business risk is service disruption, not data theft, based on the provided sources. It matters most where untrusted media is uploaded, scanned, transcoded, or previewed. Exposure is most likely in applications, services, or batch jobs using vulnerable FFmpeg or downstream libav packages to process untrusted ASF media. The bundle identifies FFmpeg 3.3.3 and Debian libav security updates, but does not provide a complete affected-version matrix. Treat as a moderate availability risk. Prioritize internet-facing or customer-upload media workflows first, especially where media parsing can consume shared infrastructure resources. Mitigation focus: Update FFmpeg or downstream libav packages using vendor security guidance.; Apply the Debian security updates where Debian-packaged libav is in use.; Restrict or quarantine untrusted ASF uploads until media processing is patched..

Prepared

Jun 12, 2026, 21:19 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.