Division by Zero in FFmpeg Video Encoding

Executive Summary

This vulnerability is a division by zero flaw in FFmpeg through version 9.0.2. It occurs in the function estimate_motion_b() within libavcodec/motion_est.c. The issue arises when frame timestamp distances are truncated to 16 bits, allowing attackers to supply inputs with timestamp gaps that are multiples of 65536. This causes MPEG-4 Part 2 or MPEG-1/2 B-frame encoding to crash with a SIGFPE signal due to the division by zero.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can cause applications using FFmpeg to crash unexpectedly when processing specific video files. An attacker could exploit this to disrupt video encoding or decoding operations, leading to denial-of-service conditions. The impact is limited to systems running vulnerable FFmpeg versions and processing crafted input files.

Useful 0 Not Useful 0

Mitigation Strategies

Update FFmpeg to version 9.0.3 or later to address the division by zero vulnerability in estimate_motion_b(). Avoid processing media files with timestamp gaps that are multiples of 65536 to prevent crashes.

Useful 0 Not Useful 0