Description
A flaw was found in FFmpeg. A remote attacker could exploit this vulnerability by providing a specially crafted MPEG-PS/VOB media file containing a malicious DVD subtitle stream. This vulnerability is caused by a signed integer overflow in the DVD subtitle parser's fragment reassembly bounds checks, leading to a heap out-of-bounds write. Successful exploitation can result in a denial of service (DoS) due to an application crash, and potentially lead to arbitrary code execution.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Red Hat Lightspeed Core
Default version status: affected
Red Hat Red Hat AI Inference Server
Default version status: affected
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3
Default version status: affected
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3
Default version status: affected
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3
Default version status: affected
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3
Default version status: affected
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3
Default version status: affected
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3
Default version status: affected
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3
Default version status: affected
Red Hat Red Hat OpenShift AI (RHOAI)
Default version status: affected