Threats tagged 'ghsa-3242-hx2p-rmrh'

FFmpeg versions through 9.0.2 have a division by zero vulnerability in the estimate_motion_b() function within libavcodec/motion_est.c. This flaw is caused by frame timestamp distances being truncated to 16 bits, allowing crafted input with timestamp gaps that are multiples of 65536 to trigger a crash during MPEG-4 Part 2 or MPEG-1/2 B-frame encoding. The vulnerability results in a SIGFPE crash, impacting availability.