Threats tagged 'ghsa-qhxm-9wr9-cwfx'

FFmpeg versions through 9.0.2 have a heap buffer overflow vulnerability in the dvbsub_encode() function within libavcodec/dvbsubenc.c. This flaw causes undercounting of each CLUT segment header by two bytes, allowing crafted files with many bitmap subtitle rectangles to overflow the output buffer and corrupt heap memory during transcoding.