Heap Buffer Overflow in FFmpeg Huffyuv Encoder

Executive Summary

This vulnerability is a heap buffer overflow in FFmpeg through version 9.0.2. It occurs in the function ff_llvidenc_diff_bytes_rvv() when attackers provide RGB video input narrower than 8 or 16 pixels for Huffyuv transcoding on RISC-V builds with RVV support. This causes negative length values, leading to writes beyond the encoder's temporary buffer and corrupting heap memory.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check if your FFmpeg version is between 7.0 and 9.0.2 and if it was compiled with RISC-V Vector (RVV) support. Use commands like 'ffmpeg -version' to check the version and 'ffmpeg -buildconf' to verify RVV support. If vulnerable, update FFmpeg to a patched version.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to execute arbitrary code, crash applications, or gain unauthorized access to sensitive data. Systems processing video files with FFmpeg, especially on RISC-V hardware, are at risk if they handle maliciously crafted narrow RGB video inputs.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by enabling memory corruption attacks that may lead to unauthorized data access or processing. Exploitation could result in data breaches, unauthorized modifications, or denial of service, which are critical concerns under these regulations.

Useful 0 Not Useful 0

Mitigation Strategies

Update FFmpeg to a version later than 9.0.2 to address the heap buffer overflow in the Huffyuv encoder. Avoid using RVV-enabled RISC-V builds for huffyuv transcoding with RGB video narrower than 8 or 16 pixels.

Useful 0 Not Useful 0