Threats tagged 'ghsa-9vrv-58pr-qmj5'

FFmpeg versions through 9.0.2 have an out-of-bounds read vulnerability in the SGI encoder's encode_frame() function. This flaw occurs due to improper handling of negative linesize frames, which can cause the process to read pixel data outside the intended frame boundary and crash. The vulnerability is triggered when a specially crafted video with a display matrix that activates autorotate vertical flip is transcoded to SGI images.