Threats tagged 'ghsa-76g4-x73x-7v54'

FFmpeg versions through 9.0.2 have an off-by-one heap overflow vulnerability in the get_exponent_dynamic() function within libavcodec/nellymoserenc.c. This flaw allows writing one element beyond allocated memory when encoding Nellymoser audio with trellis enabled, potentially leading to memory corruption.