[FFmpeg-trac] #9738(ffplay:new): Malicious webm video
FFmpeg
trac at avcodec.org
Fri Apr 29 04:02:08 EEST 2022
#9738: Malicious webm video
----------------------------------+----------------------------------
Reporter: c0re100 | Owner: (none)
Type: defect | Status: new
Priority: critical | Component: ffplay
Version: 4.4.1 | Resolution:
Keywords: | Blocked By:
Blocking: | Reproduced by developer: 0
Analyzed by developer: 0 |
----------------------------------+----------------------------------
Comment (by mkver):
This file contains parts with dimensions 512x512 and parts with dimensions
15000x15000. The latter of course leads to big allocations, in particular
with a frame-threaded codec like VP9. There exists an option to mitigate
such issues: max_pixels. It is not really possible to "fix" this as these
files can't really be distinguished from malicious files.
--
Ticket URL: <https://trac.ffmpeg.org/ticket/9738#comment:1>
FFmpeg <https://ffmpeg.org>
FFmpeg issue tracker
More information about the FFmpeg-trac
mailing list