Astra Linux – vulnerability in ffmpeg, ffmpeg5

FFmpeg n6.1.1 contains an integer overflow vulnerability. The flaw resides in the parseoptions function within sbgdec.c, part of the libavformat module. During the parsing of certain options, the software fails to perform adequate validation of inputs. As a result, negative duration values can be...