CVE-2023-46407

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to commit bf814

Description The issue is related to an out of bounds read via the dist->alphabet size variable in the read vlc prefix() function.

Recommendations For versions prior to commit bf814, consider applying a patch that fixes the out of bounds read issue in the read vlc prefix() function. As a temporary workaround, consider restricting access to the read vlc prefix() function until a patch is available.