Integer Divide-by-Zero in `vpk_read_packet` (VPK Demuxer)
code.ffmpeg.org
Hello. This is a bug found with our fuzzer: https://github.com/daedalus/fuzzer/ **File**: `libavformat/vpk.c:89` **Severity**: Medium — crafted 21-byte input crashes any FFmpeg-based application that opens a malicious `.vpk` file or stream **Root cause**: `vpk_read_packet` divides `vpk->l...
  • plateee@piefed.socialEnglish
    61·
    8 days ago

    In theory they can “find” new things, but typically it’s based on other training data.

      • plateee@piefed.socialEnglish
        4·
        8 days ago

        New bugs, not bug classes.

        They also seem to do well with chaining low severity vulnerabilities to result in an overall high severity exploit.