VDB-273539 | FFmpeg 402d98c9d467dff6931d906ebb732b9a00334e0b jpegxl_anim_dec.c jpegxl_collect_codestream_header use after free

A vulnerability, which was classified as problematic, has been found in FFmpeg 402d98c9d467dff6931d906ebb732b9a00334e0b. This issue affects the function jpegxl_collect_codestream_header of the file FFmpeg/libavformat/jpegxl_anim_dec.c. The manipulation leads to use after free.

The attack may be initiated remotely. Furthermore, there is an exploit available.

Affects random checkout which is not eligible for a CVE assignment according to MITRE definitions.