FFmpeg contains a heap buffer overflow in the tdsc_load_cursor() function that processes TDSC cursor data. When a specially crafted video file containing malformed cursor payloads is decoded, the function writes past the end of a heap‑allocated buffer. This flaw can be exploited remotely by supplying such a video file, potentially leading to denial of service or arbitrary code execution on the system.

Users running Red Hat Enterprise Linux AI 3 or Red Hat OpenShift AI have the affected FFmpeg packages. The vulnerability is present in the ffmpeg components bundled with these distributions.

With a CVSS score of 5.4, the vulnerability is classified as moderate severity. No EPSS data is available, and the vulnerability is not listed in the CISA KEV catalog. The attack requires only delivery of malicious TDSC‑encoded video content; therefore, it is likely to be exploitable from any context where FFmpeg consumes untrusted media, such as media servers, streaming services, or user‑uploaded videos. While no public exploits have been reported, the heap overrun is a classic use‑of‑pointer flaw (CWE‑787) that can lead to arbitrary code execution if an attacker can direct the overwrite.