Threats tagged 'ghsa-rfgx-535m-4pq8'

FFmpeg versions through 9.0.2 have an uninitialized memory use vulnerability in the roq_dpcm_encode_frame() function within libavcodec/roqaudioenc.c. This flaw causes stale heap contents to be encoded when the encoder is flushed early, specifically when processing short audio streams under eight frames for RoQ DPCM transcoding. As a result, uninitialized heap data from frame_buffer can leak into output packets.