Threats tagged 'ghsa-fq5x-phj3-f454'

A use-after-free vulnerability exists in FFmpeg through version 9.0.2 in the libavcodec/nvdec.c component. The function ff_nvdec_start_frame() does not reset the ctx->bitstream pointer after slice errors, allowing crafted video input that abandons a picture before end_frame to trigger a read of freed heap memory. This can cause application crashes or exposure of stale heap data.