Threats tagged 'ghsa-qjxq-q85p-hv2c'

FFmpeg versions 7.1 through 9.0.2 contain an integer overflow vulnerability in the ff_vk_decode_add_slice() function within libavcodec/vulkan_decode.c. This flaw miscalculates the Vulkan hardware acceleration bitstream buffer size, allowing an attacker to supply a crafted stream with over 2 GiB of slice data per frame. This can lead to a buffer overflow via memcpy() writing past the allocated buffer.