Paul B Mahol

A problematic vulnerability has been found in ffmpeg, affecting the component QuickTime RPZA Video Encoder in the file libavcodec/rpzaenc.c. The manipulation of the argument `y size` leads to an out-of-bounds read. This issue can be exploited remotely, potentially allowing an attacker to access confidential data and cause a denial of service.

The issue is related to the `smc encode stream` function in the `libavcodec/smcenc.c` component of the FFmpeg library. It involves an out-of-bounds read due to the manipulation of the `y size` argument, which can be exploited remotely. This could allow an attacker to access confidential data and cause a denial of service.