Threats tagged 'ghsa-cj9x-468j-6qgp'

FFmpeg versions through 9.0.2 have a heap buffer overflow vulnerability in the function ff_dxva2_hevc_fill_picture_parameters(). This flaw allows attackers to corrupt memory by supplying crafted HEVC bitstreams with many non-uniformly spaced tiles, leading to out-of-bounds writes of controlled 16-bit values during DXVA2, D3D11VA, or D3D12VA decoding on Windows systems.