CyberRota Analysis
AI-GeneratedA heap buffer overflow vulnerability exists in the VC-2/Dirac RTP packetizer of FFmpeg, allowing attackers to exploit memory corruption by sending specially crafted Dirac data units. This flaw can lead to potential arbitrary code execution or application crashes, posing a significant risk to systems utilizing affected versions of FFmpeg. Organizations that rely on FFmpeg for media processing should prioritize patching this vulnerability to mitigate the associated risks.
Original NVD Description
FFmpeg before commit 1cdeb3c contains a heap buffer overflow vulnerability in the VC-2/Dirac RTP packetizer (libavformat/rtpenc_vc2hq.c) that allows attackers to trigger memory corruption by supplying a crafted Dirac data unit. The packetizer copies an input-derived data unit or fragment size into a fixed-size buffer without an upper bound check, causing a heap buffer overflow when the crafted input is packetized for RTP output.