Commit 3550b1f04e for ffmpeg
commit 3550b1f04e92bb35264dabb511b23acb6a543f85
Author: Michael Niedermayer <michael@niedermayer.cc>
Date: Sun Nov 8 16:47:11 2026 +0100
avcodec/vmdvideo: reject frames with an unknown rendering method
Fixes: information disclosure
Fixes: gwIoY2z5dNBe
Information disclosure Replicated through UnModified FFmpeg
Found during triage of the security report 4q1titS5dliF
diff --git a/libavcodec/vmdvideo.c b/libavcodec/vmdvideo.c
index 022e60a692..a9f73389af 100644
--- a/libavcodec/vmdvideo.c
+++ b/libavcodec/vmdvideo.c
@@ -372,6 +372,9 @@ static int vmd_decode(VmdVideoContext *s, AVFrame *frame)
pp = FF_PTR_ADD(pp, prev_linesize);
}
break;
+ default:
+ avpriv_request_sample(s->avctx, "Method %d", meth);
+ return AVERROR_PATCHWELCOME;
}
return 0;
}