Threats tagged 'ghsa-7hrw-2r6j-2p3m'

FFmpeg versions through 9.0.2 have a heap buffer overflow vulnerability in the liboapve_encode() function within libavcodec/liboapvenc.c. This flaw allows attackers to corrupt heap memory by providing frames larger than the encoder's configured dimensions. Specifically, crafted videos with resolution changes mid-stream can cause transcoding to APV without rescaling to write attacker-controlled pixel data beyond allocated buffers.