Commit 781f30e44f for ffmpeg
commit 781f30e44f7bf36becc4182d7dba45f044344cd1
Author: Michael Niedermayer <michael@niedermayer.cc>
Date: Wed Oct 7 00:07:48 2026 +0200
avformat/nutenc: Do not write IAMF parameter side data
Fixes: address disclosure
Fixes: bH0O2TMvkU1D
Address disclosure Replicated through UnModified FFmpeg
Found during triage of the security report AISLE-2026-0111-00173
diff --git a/libavformat/nutenc.c b/libavformat/nutenc.c
index a7173b65f9..a204141df4 100644
--- a/libavformat/nutenc.c
+++ b/libavformat/nutenc.c
@@ -950,6 +950,10 @@ static int write_sm_data(AVFormatContext *s, AVIOContext *bc, AVPacket *pkt, int
case AV_PKT_DATA_QUALITY_STATS:
// belongs into meta, not side data
break;
+ case AV_PKT_DATA_IAMF_MIX_GAIN_PARAM:
+ case AV_PKT_DATA_IAMF_DEMIXING_INFO_PARAM:
+ case AV_PKT_DATA_IAMF_RECON_GAIN_INFO_PARAM:
+ break;
}
}
}