PT-2026-141092

FFmpeg through 9.0.2 contains an uncontrolled resource consumption vulnerability in parse frame header in libavcodec/jpegxl parser.c that fails to validate TOC entry counts against remaining input. Attackers can supply a crafted JPEG XL frame header with a permuted TOC and huge toc count, making...

PT-2018-14677

Name of the Vulnerable Software and Affected Versions Libav version 12.3 Description A NULL pointer dereference exists in the ff vc1 parse frame header adv function in vc1.c, which can be exploited by attackers to cause a denial-of-service through a crafted file. Recommendations For Libav version...