Threats tagged 'ghsa-rp9m-mw76-ppmp'

FFmpeg versions 2.3 through 9.0.2 have a use of uninitialized resource vulnerability in the Huffyuv decoder. This flaw allows attackers to leak heap memory into decoded pixels by crafting specially malformed Huffyuv BGR24/BGRA video bitstreams with early-ending entropy data. The vulnerability results in uninitialized memory bytes being included in output frames, exposing potentially sensitive heap contents.