CVE-2019-1000016

FFMPEG version 4.1 contains a CWE-129: Improper Validation of Array Index vulnerability in libavcodec/cbs_av1.c that can result in Denial of service. This attack appears to be exploitable via specially crafted AV1 file has to be provided as input. This vulnerability appears to have been fixed in after commit b97a4b658814b2de8b9f2a3bce491c002d34de31.

• CWE-129

• https://github.com/FFmpeg/FFmpeg/commit/b97a4b658814b2de8b9f2a3bce491c002d34de31#diff-cd7e24986650014d67f484f3ffceef3fPatch, Third Party Advisory
• https://github.com/FFmpeg/FFmpeg/commit/b97a4b658814b2de8b9f2a3bce491c002d34de31#diff-cd7e24986650014d67f484f3ffceef3fPatch, Third Party Advisory

Published

Feb 4, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-1000010phpIPAM version 1.3.2 and earlier contains a Cross Site Scri…
• CVE-2019-1000011API Platform version from 2.2.0 to 2.3.5 contains an Incorre…
• CVE-2019-1000012Hex package manager version 0.14.0 through 0.18.2 contains a…
• CVE-2019-1000013Hex package manager hex_core version 0.3.0 and earlier conta…
• CVE-2019-1000014Erlang/OTP Rebar3 version 3.7.0 through 3.7.5 contains a Sig…
• CVE-2019-1000015Chamilo Chamilo-lms version 1.11.8 and earlier contains a Cr…
• CVE-2019-1000017Chamilo Chamilo-lms version 1.11.8 and earlier contains an I…
• CVE-2019-1000018rssh version 2.3.4 contains a CWE-77: Improper Neutralizatio…7.8
• CVE-2019-1000019libarchive version commit bf9aec176c6748f0ee7a678c5f9f9555b9…6.5
• CVE-2019-1000020libarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb…6.5
• CVE-2019-1000021slixmpp version before commit 7cd73b594e8122dddf847953fcfc85…
• CVE-2019-1000022Taoensso Sente version Prior to version 1.14.0 contains a Cr…