CVE-2017-14171

CVE-2017-14171 describes a denial-of-service vulnerability in FFmpeg versions 2.4 and 3.3.3, specifically within the nsv_parse_NSVf_header() function in libavformat/nsvdec.c. This flaw allows an attacker to cause high CPU consumption by providing a specially crafted Nullsoft Streaming Video (NSV) file that claims a large number of table entries without sufficient backing data, leading to an infinite loop. The vulnerability is rated as Medium severity (CVSS 6.5), indicating it can be exploited remotely with low attack complexity and user interaction (e.g., opening a malicious file) to achieve high availability impact. There is no impact on confidentiality or integrity. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. The CVE has received minimal community discussion and media coverage, suggesting a low level of public awareness or concern.