Bug 918438 (CVE-2023-46407)

Summary:	<media-video/ffmpeg-6.1: OOB read
Product:	Gentoo Security	Reporter:	John Helmert III <ajak>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	CONFIRMED ---
Severity:	minor	CC:	media-video
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	A4 [glsa? cleanup]
Package list:		Runtime testing required:	---

Description John Helmert III archtester

2023-11-24 23:01:42 UTC

CVE-2023-46407 (https://github.com/FFmpeg/FFmpeg/commit/bf814387f42e9b0dea9d75c03db4723c88e7d962):

FFmpeg prior to commit bf814 was discovered to contain an out of bounds read via the dist->alphabet_size variable in the read_vlc_prefix() function.

Fix is in 6.1, please bump.