Threats tagged 'ghsa-hcx6-ffr8-ff2w'

FFmpeg versions 2.0 through 9.0.2 have a vulnerability in the Go2Meeting decoder where an uninitialized variable is used. This flaw allows attackers to leak stack memory by crafting a malicious G2M3/G2M4 stream with a short Kempf palette, causing uninitialized stack bytes to be copied into the decoded output.