Threats tagged 'ghsa-px55-qvvr-j3r4'

FFmpeg versions up to 9.0.2 have a heap buffer overflow vulnerability in the PSD image decoder (libavcodec/psd.c). This flaw allows attackers to craft PSD images with dimensions and channel counts whose product exceeds 4 GB, causing a truncation in memory allocation size. On 32-bit builds, this leads to out-of-bounds writes in the decode_rle() function, potentially resulting in crashes or arbitrary code execution.