Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound in the macedecodeframe process. An attacker can corrupt heap memory and potentially execute arbitrary code by supplying a crafted CAF file with malicious bytesperpacket and framesperpacket values that...

CVE-2026-66039

FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt heap memory by supplying a crafted CAF file with a malicious bytesperpacket value. Attackers can craft a CAF file with oversized bytesperpack...

ffmpeg:ffmpeg_AV_CODEC_ID_MACE6_fuzzer: Heap-buffer-overflow in mace_decode_frame

Detailed Report: https://oss-fuzz.com/testcase?key=6156366963343360 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDMACE6fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address: 0x7d10804e1900 Crash State: macedecodefram...