🎯 Heap-based Buffer Overflow

The items that name it 2

• Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities
  advisory2026-09-08
• JFrog: PixelSmash
  writeup2026-06-22It is written here as Heap-based buffer overflow (out-of-bounds write).

  A rounding mismatch in chroma plane slice-height calculation (AV_CEIL_RSHIFT) makes the decoder write one row (640 bytes) past the allocated chroma buffer with attacker-controlled bytes