Threats tagged 'ghsa-2c7g-m5pp-fggr'

FFmpeg versions through 9.0.2 have an out-of-bounds write vulnerability in the flic_decode_frame_15_16BPP() function within libavcodec/flicvideo.c. This flaw allows attackers to corrupt heap memory on big-endian systems by supplying a specially crafted 15/16 bpp FLIC/FLX file containing an FLI_BRUN chunk. The vulnerability arises from a non-terminating byte-swap loop that writes data beyond the allocated frame buffer, potentially causing a crash.