A high-severity heap-based buffer overflow in the FFmpeg PNG APNG encoder allows remote attackers to trigger memory corruption and potential code execution.

The PNG APNG EXIF encoder is vulnerable to a heap-based buffer overflow (CWE-122) during the encoding process, which can be triggered by an unauthenticated attacker providing a malicious input file.

With a CVSS score of 8.8, this vulnerability poses a severe threat to any system that utilizes FFmpeg to encode or process image-based media. Successful exploitation could result in arbitrary code execution, leading to total compromise of the host application or operating system.

Immediate Action: Update the FFmpeg installation to the version containing the fix implemented in commit b506fafec9a19fcbc2be5271875fd4a63d6615bc.

Proactive Monitoring: Monitor application logs for crashes or unexpected termination during image encoding tasks.

Compensating Controls: Use containerization or memory-safe wrappers to isolate FFmpeg instances, limiting the impact of a potential memory corruption event.

Public Exploit Available: Unknown

Organizations must ensure that all software utilizing FFmpeg is updated to the latest patched version to prevent exploitation. Due to the high severity and the nature of media processing, prompt remediation is essential to maintain a secure posture.