Uncontrolled Resource Consumption in FFmpeg JPEG XL Parser

Executive Summary

This vulnerability is an uncontrolled resource consumption issue in FFmpeg versions up to 9.0.2. It occurs in the JPEG XL parser where the function parse_frame_header() fails to validate the number of TOC (Table of Contents) entries against the remaining input data. Attackers can exploit this by providing a maliciously crafted JPEG XL frame header with a permuted TOC and an excessively high toc_count value. This causes the parser to enter an infinite or excessively long loop, consuming excessive CPU resources.

Useful 0 Not Useful 0

Detection Guidance

Detecting this vulnerability requires checking for excessive CPU usage during JPEG XL file processing. Monitor system processes for abnormal CPU consumption when handling JPEG XL files. Use tools like 'top', 'htop', or 'ps' to identify processes consuming high CPU. Additionally, inspect network traffic for unusual JPEG XL file transfers.

Useful 0 Not Useful 0

Impact Analysis

If you use FFmpeg to process JPEG XL files, this vulnerability could allow attackers to cause denial-of-service conditions by consuming all available CPU resources. This may lead to system slowdowns, crashes, or rendering your system unresponsive during file processing.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability primarily causes CPU exhaustion through excessive parsing loops, which may lead to system unavailability. While not directly violating GDPR or HIPAA, such resource exhaustion could disrupt systems handling personal or health data, potentially violating availability requirements under GDPR Article 32 and HIPAA Security Rule requirements for access control and integrity.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update FFmpeg to the latest version that patches this issue. If updating is not possible, disable JPEG XL parsing in FFmpeg by removing or renaming libavcodec/jpegxl_parser.c. Restrict access to systems processing JPEG XL files until patched.

Useful 0 Not Useful 0