FFmpeg versions 7.0 through 8.1.2 contain a heap out-of-bounds write vulnerability in the vf_quirc filter. This vulnerability occurs when processing crafted PGS/SUP subtitle files with mismatched frame dimensions, potentially leading to heap corruption, process crashes, or code execution. The issue is fixed in version 8.1.3 and later.