Incorrect Conversion between Numeric Types

Overview Affected versions of this package are vulnerable to Incorrect Conversion between Numeric Types via an incorrect integer narrowing conversion in the AV1 RTP packetizer libavformat/rtpencav1.c. An attacker can cause an out-of-bounds memory access by supplying an AV1 OBU with a sufficiently...

EUVD-2026-62582

FFmpeg before commit b4c199c contains an incorrect integer narrowing conversion in the AV1 RTP packetizer libavformat/rtpencav1.c. The OBU size is cast to long before comparison against the remaining frame size. On targets where long is 32 bits, including 64-bit Windows, sufficiently large OBU si...