Threats tagged 'ghsa-crxj-w795-w2wj'

A heap out-of-bounds write vulnerability exists in FFmpeg versions before 8.1.3 and 9.x before 9.0.2 in the APAC decoder. The flaw is caused by an unreset bitstream index leading to an integer overflow, which bypasses reallocation checks and results in heap corruption or application crashes when processing crafted APAC files.