Threats tagged 'ghsa-x2v9-wwj2-f83c'

FFmpeg versions through 9.0.2 have a denial of service vulnerability in the cbs_jpeg_assemble_fragment() function. This flaw involves miscounting 0xff stuffing bytes in JPEG scan headers, which can cause an assertion failure and abort when processing crafted JPEG/MJPEG streams with 0xff bytes in the scan header.