An out-of-bounds read in the read_global_param() function (libavcodec/av1dec.c) of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.
| Vendor | Product | Versions |
|---|---|---|
| ffmpeg | ffmpeg | n/a |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| open source | ffmpeg | cert_advisory | 90% |
Updated vendor and product to FFmpeg, set severity to HIGH, and marked the vulnerability as actively exploited.
Initial creation
