Double-Free Vulnerability in FFmpeg Affecting Audio Stream Initialization
CVE-2024-35365

Currently unrated

Key Information:

Vendor

FFmpeg

Status
Vendor
CVE Published:
3 January 2025

What is CVE-2024-35365?

A double-free vulnerability exists in the FFmpeg audio processing module, specifically within the new_stream_audio function of the fftools/ffmpeg_mux_init.c file in version n6.1.1. This flaw could lead to memory corruption, potentially allowing an attacker to manipulate the application's behavior or crash it by exploiting improper handling of freed memory. The vulnerability emphasizes the importance of regular updates and code reviews to prevent potential exploits and ensure application integrity.

References

Timeline

  • Vulnerability published

.