Threats tagged 'ghsa-gjhm-46vw-wmhg'

FFmpeg versions through 9.0.2 have a resource leak vulnerability in the svt_jpegxs_dec_decode() function within libsvtjpegxsdec.c. This flaw causes decoder instances to leak when ff_set_dimensions() rejects frame dimensions, allowing an attacker to exhaust memory by supplying crafted JPEG XS streams with oversized headers.