Vulnerability in FFmpeg allows code execution when processing mp4 files
Google security researchers discovered a vulnerability (CVE-2022-2566) in the libavformat library, which is part of the FFmpeg multimedia package. This vulnerability enables code execution by an attacker while processing a specially crafted mp4 file on the victim's system. The vulnerability manifests starting from the FFmpeg 5.1 branch and has been fixed in the FFmpeg 5.1.2 release. The issue is caused by a calculation error in the buffer size in the function […]
