Projects
Essentials
A_tw-ffmpeg-4
ffmpeg-4-CVE-2026-75143.patch
Sign Up
Log In
Username
Password
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File ffmpeg-4-CVE-2026-75143.patch of Package A_tw-ffmpeg-4
From 1c10bcc2e17255dacb717a25ab3db142ce390602 Mon Sep 17 00:00:00 2001 From: Joshua Rogers <MegaManSec@users.noreply.github.com> Date: Tue, 4 Aug 2026 12:11:55 +0000 Subject: [PATCH] avformat/librist: honor the caller buffer size in librist_read librist_read() ignored its size argument and copied the full payload_len, overflowing a smaller destination (e.g. via the async: wrapper). Clamp the copy to the caller-provided buffer size. Fixes: out of array access --- libavformat/librist.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff a/libavformat/librist.c b/libavformat/librist.c --- a/libavformat/librist.c +++ b/libavformat/librist.c @@ -201,7 +201,7 @@ return AVERROR_EXTERNAL; } - size = data_block->payload_len; + size = FFMIN(data_block->payload_len, size); memcpy(buf, data_block->payload, size); rist_receiver_data_block_free((struct rist_data_block**)&data_block);
Locations
Projects
Search
Status Monitor
Help
Open Build Service
OBS Manuals
API Documentation
OBS Portal
Reporting a Bug
Contact
Mailing List
Forums
Chat (IRC)
Twitter
Open Build Service (OBS)
is an
openSUSE project
.