Threats tagged 'ghsa-44g2-w5qj-hv47'

FFmpeg versions through 9.0.2 have a heap buffer overflow vulnerability in the ff_libwebp_get_frame() function within libwebpenc_common.c. This flaw occurs when the cr_threshold parameter is set, allowing attackers to supply crafted media that increases resolution mid-stream. This causes memcpy() to write pixel data beyond the bounds of a stale reference frame, potentially crashing applications and corrupting memory.