Threats tagged 'ghsa-c346-mwjq-88hv'

FFmpeg versions 0.10 through 9.0.2 have a vulnerability in the sunrast_decode_frame() function that causes heap memory leakage when decoding truncated 1-bit and 4-bit paletted Sun Raster images. This occurs due to use of uninitialized resources, which can expose stale heap contents in the decoded output.