Threats tagged 'ghsa-wpcm-g3fv-8mfv'

FFmpeg versions through 9.0.2 have a NULL pointer dereference vulnerability in the aac_adtstoasc_filter() function. This flaw allows attackers to crash applications by supplying crafted ADTS AAC packets larger than 256 MB, causing unchecked failures in bit count processing during remuxing of MP4, Matroska, FLV, or LATM formats.