Threats tagged 'ghsa-6hg3-f9xg-2hg4'

FFmpeg versions 2.1 through 9.0.2 have a use of uninitialized resource vulnerability in the PCX image decoder. This flaw allows attackers to leak heap memory by crafting a PCX image with truncated run-length encoded (RLE) scanlines. The vulnerability occurs because the decoder copies uninitialized memory from an allocated buffer into the decoded image output.