Threats tagged 'ghsa-q7f2-7mqp-27x9'

FFmpeg versions 7.1 through 9.0.2 contain a NULL pointer dereference vulnerability in the ff_dovi_rpu_generate() function within libavcodec/dovi_rpuenc.c. This flaw can be triggered by crafted Dolby Vision RPU metadata streams, causing applications to crash and resulting in a denial of service condition. The vulnerability arises when attackers supply streams with default or alternating omitted DM blocks to the dovi_rpu bitstream filter with compression enabled.