Threats Tagged 'ghsa-84qc-6h9r-4w33'

FFmpeg versions through 8.1.2 contain a signed integer overflow vulnerability in the MACE6 audio decoder. This flaw allows attackers to craft a malicious CAF audio file with specially manipulated bytes_per_packet and frames_per_packet values, triggering an integer overflow during output sample count computation. The overflow leads to an undersized buffer allocation and a heap out-of-bounds write, potentially enabling arbitrary code execution. The vulnerability is fixed in a commit identified as aafb5c6.