FFmpeg is vulnerable to denial of service (DoS) attacks. These attacks are possible because it doesn’t ensure that pre-established digits and word array dimensions satisfy a required mathematical relationship. This flaw allows attacks to use X-Face image data to cause out-of-bounds array access and ultimately a denial of service.