Out-of-Bounds Read in FFmpeg bitpacked UYVY422 Decoder

Executive Summary

FFmpeg through version 9.0.2 has an out-of-bounds read vulnerability in the bitpacked_decode_uyvy422() function. This flaw occurs because the function does not check if packets contain the required width * height * 2 bytes of data. Attackers can exploit this by sending truncated bitpacked UYVY422 packets through crafted SDP/RFC 4175 RTP sessions or raw input, causing applications to crash or potentially exposing adjacent heap memory.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability can be detected by monitoring for crashes in FFmpeg applications processing bitpacked UYVY422 packets. Check logs for segmentation faults or heap corruption errors during media processing. Use tools like Valgrind to detect out-of-bounds reads when handling crafted input files or network streams.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability could allow attackers to crash applications using FFmpeg, leading to denial-of-service conditions. In some cases, it might also expose sensitive memory contents, potentially leaking data. Users processing untrusted media files or streams are most at risk, especially if the input is not properly validated.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could impact compliance by enabling data exposure or unauthorized access if exploited. For GDPR, it may lead to violations if personal data is leaked. For HIPAA, it could compromise protected health information if exploited in healthcare systems. Organizations must ensure FFmpeg is updated to mitigate risks.

Useful 0 Not Useful 0

Mitigation Strategies

Update FFmpeg to the latest version that patches this issue. Avoid processing untrusted bitpacked UYVY422 packets from unknown sources. Implement input validation to ensure packets meet expected size requirements before processing. Disable raw input processing if not required.

Useful 0 Not Useful 0