Xinghang Lv

**Name of the Vulnerable Software and Affected Versions** FFmpeg version 8.0.1 **Description** An out-of-bounds read occurs in the `read global param()` function within the libavcodec/av1dec.c component. This issue allows attackers to cause a Denial of Service (DoS) by providing a crafted input. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** FFmpeg version 8.0.1 **Description** An improper resource deallocation and closure issue in the tools/zmqsend.c component allows attackers to cause a Denial of Service (DoS) by supplying a crafted input file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** FFmpeg version 8.0.1 **Description** A heap buffer overflow in the `av bprint finalize()` function allows attackers to cause a Denial of Service (DoS) via a crafted input. A heap buffer overflow occurs when a program writes more data to a heap-allocated memory block than it can hold, potentially corrupting data or crashing the application. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.