Threats tagged 'ghsa-4rr8-hwwq-wfvq'

FFmpeg versions through 9.0.2 have a vulnerability in the sbg_read_header() function of libavformat/sbgdec.c where an uncontrolled memory allocation occurs. This happens because the function derives an unbounded default frame size from the sample rate declared in an SBaGen script. An attacker can craft a script with a very high sample rate, causing the decoder to allocate excessively large audio frames, leading to memory exhaustion and denial of service.