Commit e73d82f44c for ffmpeg
commit e73d82f44c255405ed416fd85f91730472475cf0
Author: Michael Niedermayer <michael@niedermayer.cc>
Date: Tue Sep 29 18:36:48 2026 +0200
avfilter/src_movie: reject out of range stream indexes in the seek command
Fixes: out of array write with an out of range stream index in the amovie seek command
Fixes: CHE5mlmUNamc
Found-by: Hongduo Zhao
Replicated through UnModified FFmpeg
diff --git a/libavfilter/src_movie.c b/libavfilter/src_movie.c
index 5d4f6e31e6..af69294909 100644
--- a/libavfilter/src_movie.c
+++ b/libavfilter/src_movie.c
@@ -653,6 +653,8 @@ static int process_command(AVFilterContext *ctx, const char *cmd, const char *ar
if (sscanf(args, "%i|%"SCNi64"|%i %1s", &idx, &ts, &flags, tail) != 3)
return AVERROR(EINVAL);
+ if (idx + 1U > movie->format_ctx->nb_streams)
+ return AVERROR(EINVAL);
ret = av_seek_frame(movie->format_ctx, idx, ts, flags);
if (ret < 0)