Threats tagged 'ghsa-hhqp-5v24-4hhg'

FFmpeg versions through 9.0.2 have an integer overflow vulnerability in the hap_parse_frame_header() function within libavcodec/hapdec.c. This flaw allows attackers to craft malicious Hap video frames with Snappy length prefixes that cause an integer overflow, leading to a heap buffer overflow on 32-bit builds. Exploitation can result in application crashes or potentially arbitrary code execution.