CVE-2019-9719

CVE-2019-9719 describes a stack-based buffer overflow in the subtitle decoder of Libav 12.3, specifically within the srt_to_ass function in libavcodec/srtdec.c, which can be triggered by a crafted Matroska video file. This vulnerability carries a high CVSS score of 8.8, indicating a critical risk due to its network attack vector, low attack complexity, and high potential for confidentiality, integrity, and availability impacts, requiring user interaction. Despite the high severity, there is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage, though some third parties dispute its classification as a vulnerability.