Threats tagged 'ghsa-4x88-99x2-vh7g'

FFmpeg versions through 9.0.2 have a heap buffer overflow vulnerability in the ff_llvidenc_diff_bytes_rvv() function. This flaw occurs when processing RGB video narrower than 8 or 16 pixels during Huffyuv transcoding on RVV-enabled RISC-V builds, leading to heap memory corruption due to negative length values. The vulnerability can be triggered by an attacker supplying specially crafted video input.