FFmpeg n7.0 has a race condition vulnerability in the VP9 decoder. This could lead to a data race if video encoding parameters were being exported, as the side data would be attached in the decoder thread while being read in the output thread.
| Version | Score | Severity | Vector String |
|---|---|---|---|
| 3.1 | 5.9 | Medium | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N |
| Product | Vendor | Version |
|---|---|---|
| n/a | n/a | 1.0.7 |