Threats tagged 'ghsa-gc9x-4w7v-3282'

A heap buffer overflow vulnerability exists in FFmpeg versions before 8.1.3 and 9.x before 9.0.2 in the Cook multichannel decoder. The flaw arises because the decoder does not verify that subpacket channel masks are disjoint, allowing crafted RealMedia Cook streams with overlapping masks to cause out-of-bounds writes during decoding.