Threats tagged 'ghsa-v7mh-fwjx-mgh7'

FFmpeg versions through 9.0.2 have a heap buffer overflow vulnerability in the libavcodec/exrenc.c component. This flaw occurs when the encode_scanline_rle() function processes frames taller than the encoder height, allowing attackers to corrupt heap memory. Crafted input with a resolution that grows mid-stream during transcoding to OpenEXR with RLE compression can cause pointer writes beyond the scanline array, leading to application crashes.