Threats tagged 'ghsa-x5qr-4g8r-vgwj'

FFmpeg versions through 9.0.2 have a vulnerability in the aribcaption_trans_ass_subtitle() function in libavcodec/libaribcaption.c. This flaw involves an out-of-bounds read and an invalid free operation due to incorrect use of region_count instead of num_rects when freeing subtitle rectangles. Crafted ARIB captions can trigger heap corruption by exceeding the 8 KiB AVBPrint limit, leading to freeing out-of-bounds pointers.