Threats tagged 'ghsa-fw6x-38vf-3792'

FFmpeg versions through 9.0.2 have an integer overflow vulnerability in the cbs_vp9_split_fragment() function within libavcodec/cbs_vp9.c. This flaw affects 32-bit builds where the superframe size check can wrap due to near-2^32 frame sizes in a crafted VP9 packet. Exploitation can cause out-of-bounds reads leading to application crashes.