CyberRota Analysis
AI-GeneratedFFmpeg versions up to 9.0.2 are vulnerable to an uninitialized memory disclosure in the av_dynamic_hdr_plus_to_t35() function, which can expose up to three bytes of sensitive data when the tone_mapping_flag is set to 0. This vulnerability allows attackers to craft malicious Matroska T.35 BlockAdditional or HEVC/AV1 SEI metadata, potentially leading to the leakage of process memory into output files during remuxing or transcoding. Organizations using FFmpeg for media processing should prioritize this issue to mitigate the risk of data exposure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in av_dynamic_hdr_plus_to_t35() that leaves up to three payload bytes uninitialized when tone_mapping_flag is 0. Attackers can supply crafted Matroska T.35 BlockAdditional or HEVC/AV1 SEI metadata so that remuxing or transcoding writes leaked process memory into output files.