DeutschShown in its original language — a full translation is planned for a future version.
ffmpeg: Schwachstelle ermöglicht Denial of Service
view advisory published 2024-12-01
Ein Angreifer kann eine Schwachstelle in ffmpeg ausnutzen, um einen Denial of Service Angriff durchzuführen und nicht spezifizierte Auswirkungen zu verursachen.
01
describes (9)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-35368US | — | — | ||
FFmpeg n7.0 is affected by a Double Free via the rkmpp_retrieve_frame function within libavcodec/rkmppdec.c. | ||||
| CVE-2024-35367US | — | — | ||
FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dsp_altivec.c, static const vec_s8 h_subpel_filters_outer | ||||
| CVE-2024-35366US | — | — | ||
FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options function of sbgdec.c within the libavformat module. When parsing certain options, the software does… | ||||
| CVE-2024-36616US | — | — | ||
An integer overflow in the component /libavformat/westwood_vqa.c of FFmpeg n6.1.1 allows attackers to cause a denial of service in the application via a crafted VQA file. | ||||
| CVE-2024-36615US | — | — | ||
FFmpeg n7.0 has a race condition vulnerability in the VP9 decoder. This could lead to a data race if video encoding parameters were being exported, as the side data would be attach… | ||||
| CVE-2024-36618US | — | — | ||
FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, potentially resulting in a denial-of-service (DoS) condition. | ||||
| CVE-2024-36617US | — | — | ||
FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder. | ||||
| CVE-2024-36619US | — | — | ||
FFmpeg n6.1.1 has a vulnerability in the WAVARC decoder of the libavcodec library which allows for an integer overflow when handling certain block types, leading to a denial-of-ser… | ||||
| CVE-2024-35369US | — | — | ||
In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists due to insufficient validation of certain parameters when par… | ||||
02
references
External citations — patches, advisories, analysis.
- GitHub Advisory Database vom 2024-12-01external
- Debian Security Advisory DLA-4039 vom 2025-02-01external
- Debian Security Advisory DLA-4440 vom 2026-01-17external
- Debian Security Advisory DSA-5985 vom 2025-08-25external
- SUSE Security Update SUSE-SU-2025:1128-1 vom 2025-04-03external
- SUSE Security Update SUSE-SU-2025:1450-1 vom 2025-05-05external
- openSUSE Security Update OPENSUSE-SU-2025:15177-1 vom 2025-05-31external
- openSUSE Security Update OPENSUSE-SU-2025:15010-1 vom 2025-04-19external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan