Threats tagged 'ghsa-4rxc-7q96-c86h'

FFmpeg versions through 9.0.2 have an out-of-bounds write vulnerability in the v4l2_buffer_swframe_to_buf() function within libavcodec/v4l2_buffers.c. This occurs because cumulative plane offsets are not validated against the V4L2 buffer length, allowing crafted video input to cause an unsigned wraparound and result in memcpy() writing beyond the mapped driver buffer during V4L2 M2M encoding.