CVE-2017-9608

The dnxhd decoder in FFmpeg before 3.2.6, and 3.3.x before 3.3.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted mov file.

• CWE-476

• http://www.openwall.com/lists/oss-security/2017/08/14/1Mailing List
• http://www.openwall.com/lists/oss-security/2017/08/15/8Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/100348Third Party Advisory, VDB Entry
• https://github.com/FFmpeg/FFmpeg/commit/0a709e2a10b8288a0cc383547924ecfe285cef89Patch
• https://github.com/FFmpeg/FFmpeg/commit/31c1c0b46a7021802c3d1d18039fca30dba5a14ePatch
• https://github.com/FFmpeg/FFmpeg/commit/611b35627488a8d0763e75c25ee0875c5b7987ddPatch
• https://www.debian.org/security/2017/dsa-3957Third Party Advisory
• http://www.openwall.com/lists/oss-security/2017/08/14/1Mailing List
• http://www.openwall.com/lists/oss-security/2017/08/15/8Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/100348Third Party Advisory, VDB Entry
• https://github.com/FFmpeg/FFmpeg/commit/0a709e2a10b8288a0cc383547924ecfe285cef89Patch
• https://github.com/FFmpeg/FFmpeg/commit/31c1c0b46a7021802c3d1d18039fca30dba5a14ePatch
• https://github.com/FFmpeg/FFmpeg/commit/611b35627488a8d0763e75c25ee0875c5b7987ddPatch
• https://www.debian.org/security/2017/dsa-3957Third Party Advisory

Published

Dec 27, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-9602KBVault Mysql Free Knowledge Base application package 0.16a …9.8
• CVE-2017-9603SQL injection vulnerability in the WP Jobs plugin before 1.5…
• CVE-2017-9604KDE kmail before 5.5.2 and messagelib before 5.5.2, as distr…
• CVE-2017-9605The vmw_gb_surface_define_ioctl function (accessible via DRM…
• CVE-2017-9606Infotecs ViPNet Client and Coordinator before 4.3.2-42442 al…
• CVE-2017-9607The BL1 FWU SMC handling code in ARM Trusted Firmware before…7
• CVE-2017-9609Cross-site scripting (XSS) vulnerability in Blackcat CMS 1.2…
• CVE-2017-9610The xps_load_sfnt_name function in xps/xpsfont.c in Artifex …
• CVE-2017-9611The Ins_MIRP function in base/ttinterp.c in Artifex Ghostscr…7.8
• CVE-2017-9612The Ins_IP function in base/ttinterp.c in Artifex Ghostscrip…
• CVE-2017-9613Stored Cross-site scripting (XSS) vulnerability in SAP Succe…
• CVE-2017-9614The fill_input_buffer function in jdatasrc.c in libjpeg-turb…8.8