FFmpeg 输入验证错误漏洞

FFmpeg is a complete solution for recording, converting and streaming audio and video. A security vulnerability exists in FFmpeg, which stems from dwauncompress in libavcodec/exr.c that does not strictly check dccount, and can be exploited by an attacker to cross-border array access...

PT-2020-6180 · FFmpeg +5 · Ffmpeg +5

Name of the Vulnerable Software and Affected Versions: FFmpeg version 4.3.1 Description: The issue is related to the decode frame function in the libavcodec/exr.c component, which has an out-of-bounds write due to errors in calculations. This can be exploited by a remote attacker to cause a denia...