Threats tagged 'ghsa-mjj3-3wfp-gvm7'

FFmpeg versions through 9.0.2 have a heap out-of-bounds read vulnerability in the v4l2_buffer_swframe_to_buf() function within libavcodec/v4l2_buffers.c. This flaw mishandles frames with negative linesize, allowing attackers to supply crafted bottom-up AVI or PNM/PFM files that are transcoded to a V4L2 M2M encoder. Exploitation can cause application crashes or leak heap memory into the encoded output.