Threats tagged 'ghsa-gh9x-8hxx-prcf'

FFmpeg versions through 9.0.2 have a memory leak vulnerability in the libavcodec/vdpau.c component. This flaw allows attackers to exhaust heap memory by aborting pictures before the end_frame process. The vulnerability is triggered by supplying crafted H.264 streams with malformed NAL units that repeatedly abandon pictures, causing continuous leakage of the bitstream_buffers table and resulting in denial of service.