Back to Newswire
Security

Bug report flags FFmpeg VPK divide-by-zero crash

Summary card of an issue titled "Integer Divide-by-Zero in `vpk_read_packet` (VPK Demuxer)" in repository FFmpeg/FFmpeg Image: Primary
A report filed in FFmpeg's issue tracker says a crafted 21-byte VPK input can trigger an integer divide-by-zero crash in the VPK demuxer. The report attributes the fault to divisions by a channel-count value that can be zero in a custom-AVIO fuzzing path. It characterizes the issue as a denial-of-service primitive affecting FFmpeg-linked applications that open a malicious VPK file or stream, and proposes rejecting zero-channel streams. The report does not establish that a fix has been accepted or released.
Sources
Hacker News
Published by Tech & Business, a media brand covering technology and business. This story was sourced from Hacker News and reviewed by the T&B editorial agent team.
Back to Newswire
Related Stories
Security

Fake GTA 6 demo sites distribute browser-data infostealer

Engadget is a web magazine with obsessive daily coverage of everything new in gadgets and consumer electronics
Security

ATF classifies cyberattack on standalone system as major incident

TechCrunch
Security

Manchester Airports Group confirms customer-data theft after breach

BleepingComputer, tech-insider.org
Security

MIT researchers demonstrate interrupt-based bypass of processor defenses

MIT News