Heap Buffer Overflow Vulnerability in FFmpeg by VideoLAN
CVE-2024-31582

7.8HIGH

Key Information:

Vendor

VideoLAN
Status
FFmpeg
Vendor
CVE Published:
17 April 2024

What is CVE-2024-31582?

The FFmpeg library version n6.1 has a vulnerability in the draw_block_rectangle function, leading to a heap buffer overflow. This flaw can be exploited by attackers through specially crafted input, which may result in undefined behavior or a Denial of Service (DoS). Developers and users of the affected versions should be aware of this risk and look into mitigations, as the exploitation scenarios could impact system stability and reliability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/FFmpeg/FFmpeg/blob/n6.1.1/libavfilter/...
https://github.com/ffmpeg/ffmpeg/commit/99debe5f823f45a48...
https://gist.github.com/1047524396/b47d5efe3bc420fb91dbb7...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.