Threats tagged 'ghsa-97hh-vm9v-mprx'

FFmpeg versions through 9.0.2 have a memory leak vulnerability in the ff_mjpeg_decode_sof() function within libavcodec/mjpegdec.c. This flaw occurs because the hwaccel_picture_private pointer is overwritten without being freed, allowing crafted MJPEG streams with repeated SOF markers or failing frames to leak hardware acceleration private data and buffers during VAAPI or NVDEC decoding.