An out-of-bounds write vulnerability in the FFmpeg vf_swaprect filter presents a high risk of system compromise through the processing of malicious media content.

This flaw is caused by an incorrect calculation of buffer size when processing NV12 frames in the vf_swaprect filter. It is an unauthenticated vulnerability that triggers when a user processes a specifically crafted video file.

Successful exploitation of this vulnerability results in memory corruption that can be leveraged for arbitrary code execution. Given the CVSS score of 7.8, this vulnerability poses a significant risk to the confidentiality, integrity, and availability of any system or service that utilizes the affected FFmpeg filter.

Immediate Action: Apply the security update incorporating the fix in commit a7e38b617b32f996beaa371bbf04b39907d7a527.

Proactive Monitoring: Monitor system stability and logs for recurring errors or crashes related to video processing filters.

Compensating Controls: Use a Web Application Firewall or content inspection tool to identify and block malicious media files before they reach the processing engine.

Public Exploit Available: false

The vulnerability represents a clear and present danger to affected systems. Organizations must prioritize updating their FFmpeg instances to a patched version to prevent potential exploitation and maintain a secure operating environment.