tocsin

Debian/ffmpeg: high 7.8

FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In mov_read_ispe(), uint32_t width/height values from a crafted HEIF ispe box are stored into signed int fields without bounds che

Action: Upgrade ffmpeg to 7:7.1.5-0+deb13u1 or later.

Affected

introducedfixedlast affected
07:7.1.5-0+deb13u1-

Fixed versions

7:7.1.5-0+deb13u1

Sources

published · modified · JSON