CyberRota Analysis
AI-GeneratedFFmpeg versions prior to 8.1.3 are vulnerable to an infinite loop in the HLS demuxer, which can be exploited by remote attackers to create a denial of service condition. This occurs when a crafted self-referencing playlist is opened, leading to excessive CPU and I/O resource consumption. Organizations using FFmpeg for media processing should prioritize updating to mitigate the risk of service disruption.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
FFmpeg before 8.1.3 contains an infinite loop vulnerability in the HLS demuxer that allows remote attackers to cause denial of service because parse_playlist() accepts Master Playlist tags inside Media Playlists. Attackers can trick victims into opening a crafted self-referencing playlist that endlessly adds variants in hls_read_header(), causing unbounded CPU and I/O consumption.
Related CVEs
Other vulnerabilities affecting the same vendor(s)