CVE-2019-18214

Name of the Vulnerable Software and Affected Versions Video Converter app version 0.1.0 for Nextcloud

Description The issue allows for denial of service through CPU and memory consumption by initiating multiple concurrent conversions. This happens because the workload is not queued for serial execution, potentially leading to many FFmpeg processes running simultaneously.

Recommendations For Video Converter app version 0.1.0, consider restricting concurrent conversions to prevent excessive CPU and memory consumption until a fix is available. As a temporary workaround, limiting the number of simultaneous FFmpeg processes may help mitigate the risk of denial of service.