Threats tagged 'ghsa-47pr-jfr8-mqv8'

FFmpeg versions 9.0 through 9.0.2 have an integer overflow vulnerability in the Vulkan encoder component (libavcodec/ffv1enc_vulkan.c). This flaw causes the GPU buffer for float remapping to be undersized when processing large frames, leading to out-of-bounds GPU memory writes. Exploiting this issue requires supplying large GBRPF32 or GBRAPF32 images or videos transcoded to FFV1 format with the Vulkan encoder, which can cause crashes or memory corruption.