Threats tagged 'ghsa-q537-2h8q-7vfj'

FFmpeg versions through 9.0.2 have an uncontrolled recursion vulnerability in the score_header() function within libavcodec/flac_parser.c. This flaw allows attackers to craft a FLAC input stream with many small valid-looking frame headers, causing deep recursion that exhausts the thread stack and crashes the process during demuxing or parsing.