Integer Divide-by-Zero in `vpk_read_packet` (VPK Demuxer)
code.ffmpeg.org
Hello. This is a bug found with our fuzzer: https://github.com/daedalus/fuzzer/ **File**: `libavformat/vpk.c:89` **Severity**: Medium — crafted 21-byte input crashes any FFmpeg-based application that opens a malicious `.vpk` file or stream **Root cause**: `vpk_read_packet` divides `vpk->l...
    • plateee@piefed.socialEnglish
      4·
      7 days ago

      New bugs, not bug classes.

      They also seem to do well with chaining low severity vulnerabilities to result in an overall high severity exploit.