Threats tagged 'ghsa-pr5x-4ggj-w5wj'

FFmpeg versions through 9.0.2 have an integer overflow vulnerability in the ff_prores_kostya_encode_init() function. This flaw causes incorrect calculation of frame_size_upper_bound using 32-bit arithmetic for large frame dimensions. An attacker can exploit this by supplying a high-resolution video encoded with the prores_ks encoder, leading to heap memory corruption due to buffer overflow during encoding.