Integer overflow vulnerability in FFmpeg before n6.1

CVE-2024-22860

What is CVE-2024-22860?

An integer overflow vulnerability exists in FFmpeg, specifically affecting the JPEG XL Animation decoder prior to version n6.1. This flaw allows remote attackers to execute arbitrary code by manipulating the jpegxl_anim_read_packet component. Exploiting this vulnerability can lead to significant security risks, as it opens the door for attackers to run malicious code on affected systems. Users of FFmpeg are encouraged to update to the latest version to mitigate the risks associated with this vulnerability.

References