[FFmpeg-trac] #9738(ffplay:new): Malicious webm video

FFmpeg trac at avcodec.org
Fri Apr 29 04:02:08 EEST 2022


#9738: Malicious webm video
----------------------------------+----------------------------------
             Reporter:  c0re100   |                    Owner:  (none)
                 Type:  defect    |                   Status:  new
             Priority:  critical  |                Component:  ffplay
              Version:  4.4.1     |               Resolution:
             Keywords:            |               Blocked By:
             Blocking:            |  Reproduced by developer:  0
Analyzed by developer:  0         |
----------------------------------+----------------------------------
Comment (by mkver):

 This file contains parts with dimensions 512x512 and parts with dimensions
 15000x15000. The latter of course leads to big allocations, in particular
 with a frame-threaded codec like VP9. There exists an option to mitigate
 such issues: max_pixels. It is not really possible to "fix" this as these
 files can't really be distinguished from malicious files.
-- 
Ticket URL: <https://trac.ffmpeg.org/ticket/9738#comment:1>
FFmpeg <https://ffmpeg.org>
FFmpeg issue tracker


More information about the FFmpeg-trac mailing list