CyberRota Analysis
AI-GeneratedA vulnerability in FFmpeg's tdsc_load_cursor() function allows for heap buffer overflow when processing malicious TDSC cursor data. This could enable remote attackers to execute arbitrary code or cause a denial of service by supplying specially crafted video files. Organizations using FFmpeg should prioritize patching this flaw to mitigate potential exploitation risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in FFmpeg. The tdsc_load_cursor() function writes beyond the bounds of a heap-allocated buffer when processing crafted TDSC cursor data. A remote attacker could exploit this by supplying a specially crafted video file, potentially leading to a denial of service or arbitrary code execution.