Threats tagged 'ghsa-gm97-rxv6-cv4g'

FFmpeg versions through 9.0.2 have a heap buffer overflow vulnerability in the GIF encoder component. The flaw occurs in the gif_image_write_image() function within libavcodec/gif.c, where the buffer size is incorrectly calculated based on the first frame's linesize. If an attacker supplies PAL8 video with a frame linesize that increases mid-stream, it can cause a heap overflow during GIF transcoding.