Threats tagged 'ghsa-fvv9-x4pm-v3vq'

FFmpeg versions through 9.0.2 have an out-of-bounds memory access vulnerability in the encode_frame() function of libavcodec/huffyuvenc.c. This occurs because encode_init() does not validate minimum frame dimensions for the median predictor. An attacker can craft a very small video frame (e.g., 2 pixels wide or 1-2 pixels tall) that triggers negative sub_median_pred lengths, leading to out-of-bounds reads and writes during transcoding to huffyuv or ffvhuff, causing the encoder to crash.