FFmpeg (<= 9.0.2)

FFmpeg through 9.0.2 contains an integer overflow vulnerability in ff_prores_kostya_encode_init() due to 32-bit arithmetic miscalculating frame_size_upper_bound for large frame dimensions.

FFmpeg versions through 9.0.2 are vulnerable to a heap buffer overflow in libavcodec/exrenc.c that can cause memory corruption and application crashes during OpenEXR RLE encoding of frames exceeding initial height.

FFmpeg through 9.0.2 contains an integer overflow vulnerability in the VVC decoder alloc_frame() function that leads to heap out-of-bounds writes on 32-bit builds.

FFmpeg versions 9.0.2 and earlier are vulnerable to a heap buffer overflow in the libavcodec/flicvideo.c component, which could allow remote code execution or application crashes via crafted FLIC files.

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in ff_dxva2_hevc_fill_picture_parameters() that allows attackers to corrupt memory via crafted HEVC bitstreams during hardware-accelerated decoding on Windows.

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in dvbsub_encode() in libavcodec/dvbsubenc.c due to undercounting CLUT segment headers.

FFmpeg versions through 9.0.2 contain an integer overflow in the cbs_jpeg_write_scan function, leading to heap buffer overflows on 32-bit architectures when processing crafted MJPEG/JPEG streams.

FFmpeg versions through 9.0.2 contain an integer overflow vulnerability in the hap_parse_frame_header function, which can be exploited by a crafted Hap video frame to cause a heap buffer overflow and potential remote code execution on 32-bit systems.

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in vdpau_hevc_start_frame() within libavcodec/vdpau_hevc.c.

FFmpeg versions through 9.0.2 are vulnerable to a heap buffer overflow in the PSD decoder, allowing remote attackers to achieve memory corruption or arbitrary code execution via crafted PSD images on 32-bit systems.

A heap buffer overflow in FFmpeg through 9.0.2 allows for heap memory corruption when transcoding video files with mid-stream resolution changes.