FFmpeg (Through 9.0.2)

FFmpeg through 9.0.2 contains a double free vulnerability in libavcodec/cbs_sei.c that allows heap memory corruption via crafted H.264 streams.

FFmpeg through 9.0.2 contains a heap overflow vulnerability in libavcodec/qsvenc.c caused by the reuse of an undersized pooled QSVFrame buffer when input dimensions increase mid-stream without rescaling, which can lead to application crashes or heap memory corruption.

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in ff_llvidenc_diff_bytes_rvv() that allows attackers to corrupt heap memory by triggering negative length values in the Huffyuv encoder.

FFmpeg through 9.0.2 contains an out-of-bounds write vulnerability in libavcodec/v4l2_buffers.c triggered by crafted video input during V4L2 M2M encoding.