Threats tagged 'ghsa-5qhm-w56h-842w'

FFmpeg versions 7.0 before 8.1.3 and 9.x before 9.0.2 have a heap out-of-bounds write vulnerability in the vk_av1_decode_slice() function within libavcodec/vulkan_av1.c. This occurs because the tile-count limit is only checked once on entry, allowing an attacker to supply a crafted AV1 stream with more than 256 tiles. This can cause overflow of tile_sizes and heap memory corruption.