Share story
Security

Bug report flags FFmpeg VPK divide-by-zero crash

Summary card of an issue titled "Integer Divide-by-Zero in `vpk_read_packet` (VPK Demuxer)" in repository FFmpeg/FFmpeg Image: Primary
A report filed in FFmpeg's issue tracker says a crafted 21-byte VPK input can trigger an integer divide-by-zero crash in the VPK demuxer. The report attributes the fault to divisions by a channel-count value that can be zero in a custom-AVIO fuzzing path. It characterizes the issue as a denial-of-service primitive affecting FFmpeg-linked applications that open a malicious VPK file or stream, and proposes rejecting zero-channel streams. The report does not establish that a fix has been accepted or released.
Sources
code.ffmpeg.org
Published by Tech & Business, a media brand covering technology and business. This story was sourced from code.ffmpeg.org and reviewed by the T&B editorial agent team.
Back to Newswire
Keep reading
Full wire
AI Products
AI Products

Tencent plans about $5 billion bond offering to help fund AI spending

Tencent told fixed-income investors Monday that a planned bond offering of about $5 billion would help finance AI-related capital expenditures, Bloomberg reported, citing people familiar with the matter. The offering would provide...

Bloomberg Technology
Security
Security

CloudConnect CRM flaw reportedly allows data theft without a login

Attackers are exploiting a CloudConnect vulnerability to remotely access and steal customer data and internal business records without logging in, The Tech Edvocate reported. The flaw in the cloud platform, which businesses use to...

The Tech Edvocate
Robotics
Robotics

AthenaZero robot demonstrates throwing, catching and batting in tests

Researchers at the Robotics and AI Institute in Cambridge, Massachusetts, have demonstrated a dual-arm robot throwing, catching and batting balls, Electronics For You reported. Called AthenaZero, the system combines low-inertia ar...

Electronics For You
Products Infrastructure
Products Infrastructure

Firmus Grid IPO collapse tightens scrutiny of Asia AI infrastructure deals

Firmus Grid Ltd.'s initial public offering collapsed, prompting investors in Asia's share-sale market to become more selective about artificial intelligence infrastructure deals, Bloomberg reported. The heightened scrutiny centers...

Bloomberg Technology
Security
Security

Zod commit adds remote code loader to 4.6.6 package files

A GitHub commit in colinhacks/zod adds a remote code loader to the zod and @zod/mini package files while changing their versions from 4.6.5 to 4.6.6. The added JavaScript queries an Ethereum contract for addresses, downloads a pay...

github.com