Threats tagged 'ghsa-g6vq-jf85-45hj'

FFmpeg versions through 9.0.2 have a heap buffer overflow vulnerability in the LCEVC decoder component. This occurs because the output picture dimensions are not properly validated against the allocated frame size, allowing crafted LCEVC enhancement data in H.264 or HEVC streams to corrupt heap memory during decoding.