Threats tagged 'ghsa-cvrp-p38c-35rp'

FFmpeg versions through 9.0.2 have a heap buffer overflow vulnerability in the libavcodec/flicvideo.c component. This flaw arises because the function check_pixel_ptr() only verifies one boundary when processing negative-stride frames. An attacker can craft a malicious FLIC file with RLE and delta chunks that write pixel data beyond the allocated frame storage, leading to heap memory corruption. This can cause application crashes or potentially allow code execution.