{"id":"CVE-2019-9746","details":"In libwebm before 2019-03-08, a NULL pointer dereference caused by the functions OutputCluster and OutputTracks in webm_info.cc will trigger an abort, which allows a DoS attack, a similar issue to CVE-2018-19212.","modified":"2026-03-14T09:45:51.322880Z","published":"2019-03-13T16:29:00.703Z","references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/webm/issues/detail?id=1605"},{"type":"FIX","url":"https://chromium.googlesource.com/webm/libwebm/+/2427abe0bde234987ed005a3adca461e9a85dfb7"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/webmproject/libwebm","events":[{"introduced":"0"},{"last_affected":"82ac5fcdc8525820442faa90847b452113fc9394"}],"database_specific":{"versions":[{"introduced":"0"},{"last_affected":"1.0.0.27"}]}}],"versions":["libwebm-1.0.0.10","libwebm-1.0.0.11","libwebm-1.0.0.12","libwebm-1.0.0.13","libwebm-1.0.0.14","libwebm-1.0.0.15","libwebm-1.0.0.16","libwebm-1.0.0.17","libwebm-1.0.0.18","libwebm-1.0.0.19","libwebm-1.0.0.2","libwebm-1.0.0.20","libwebm-1.0.0.21","libwebm-1.0.0.22","libwebm-1.0.0.23","libwebm-1.0.0.24","libwebm-1.0.0.25","libwebm-1.0.0.26","libwebm-1.0.0.27","libwebm-1.0.0.3","libwebm-1.0.0.4","libwebm-1.0.0.5","libwebm-1.0.0.6","libwebm-1.0.0.7","libwebm-1.0.0.8","libwebm-1.0.0.9"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-9746.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}