CyberRota Analysis
AI-GeneratedThe vulnerability affects the FFmpeg library on Windows systems, specifically in the AV1 RTP packetizer, where an incorrect integer narrowing conversion can lead to out-of-bounds memory access. This occurs when large OBU size values are incorrectly cast, allowing oversized packets to bypass safety checks and potentially leading to memory corruption or crashes. Organizations using FFmpeg for media processing should prioritize patching this vulnerability to mitigate the risk of exploitation.
Original NVD Description
FFmpeg before commit b4c199c contains an incorrect integer narrowing conversion in the AV1 RTP packetizer (libavformat/rtpenc_av1.c). The OBU size is cast to long before comparison against the remaining frame size. On targets where long is 32 bits, including 64-bit Windows, sufficiently large OBU size values are sign-flipped by the narrowing cast, producing a negative value that passes the payload size check. This allows an oversized OBU to bypass the safety bound on affected platforms, leading to out-of-bounds memory access when the oversized value is subsequently used as a copy length.