{"id":"RUSTSEC-2025-0169","summary":"`FormatContext` stream accessors can cause undefined behavior from safe code","details":"Affected versions of `stainless_ffmpeg` exposed several safe public methods on `FormatContext` that accepted a `stream_index` parameter and used it in unsafe pointer operations without checking whether the index was valid. These methods performed pointer arithmetic and dereferenced the resulting stream pointer. Safe callers could pass a negative or out-of-bounds `stream_index`, which could cause out-of-bounds pointer access and undefined behavior from safe Rust code.\n\nThe issue was fixed in version `0.6.0` by marking the affected stream accessor methods as `unsafe` and documenting that callers must ensure `stream_index` is a valid stream index.","modified":"2026-08-11T10:30:03.159147552Z","published":"2025-04-24T12:00:00Z","database_specific":{"license":"CC0-1.0"},"references":[{"type":"PACKAGE","url":"https://crates.io/crates/stainless_ffmpeg"},{"type":"ADVISORY","url":"https://rustsec.org/advisories/RUSTSEC-2025-0169.html"},{"type":"REPORT","url":"https://github.com/nomalab/stainless-ffmpeg/issues/63"},{"type":"WEB","url":"https://github.com/nomalab/stainless-ffmpeg/pull/64"},{"type":"WEB","url":"https://github.com/nomalab/stainless-ffmpeg/commit/a649e8cb4e7c9859279d1dc85051df5e7a4932f7"}],"affected":[{"package":{"name":"stainless_ffmpeg","ecosystem":"crates.io","purl":"pkg:cargo/stainless_ffmpeg"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"0.6.0"}]}],"ecosystem_specific":{"affected_functions":null,"affects":{"functions":["stainless_ffmpeg::format_context::FormatContext::get_codec_id","stainless_ffmpeg::format_context::FormatContext::get_stream","stainless_ffmpeg::format_context::FormatContext::get_stream_type","stainless_ffmpeg::format_context::FormatContext::get_stream_type_name"],"arch":[],"os":[]}},"database_specific":{"source":"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2025-0169.json","categories":[],"cvss":null,"informational":"unsound"}}],"schema_version":"1.9.0"}