FFmpeg Two Vulnerabilities

Two vulnerabilities have been identified in FFmpeg, which can be exploited by malicious people to cause a DoS (Denial of Service) and compromise an application using the library.

1. An error within the "msrle_decode_8_16_24_32()" function (libavcodec/msrledec.c) when decoding Microsoft RLE encoded data can be exploited to cause an out of array access violation.
2. An integer overflow error within the "iff_read_header()" function (libavformat/iff.c) when parsing CMAP chunks can be exploited to cause a heap-based buffer overflow via a specially crafted header.

Successful exploitation of this vulnerability may allow execution of arbitrary code.