Out-of-bounds Read Vulnerability in FFmpeg Video Processing Library
CVE-2024-35367

9.1CRITICAL

Key Information:

Vendor

FFmpeg

Status
Ffmpeg
Vendor
CVE Published:
29 November 2024

What is CVE-2024-35367?

An out-of-bounds read vulnerability exists in the FFmpeg video processing library version n6.1.1, specifically in the libavcodec module. This issue arises from the handling of certain video codecs, notably through the vp8dsp_altivec.c component. The vulnerability can potentially allow for unauthorized access to sensitive data or lead to unexpected application behavior, posing risks to system integrity and security. Proper mitigation measures and updates to the latest versions are essential to maintain software security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/ffmpeg/ffmpeg/commit/09e6840cf7a3ee07a...
https://github.com/FFmpeg/FFmpeg/blob/n6.1.1/libavcodec/p...
https://gist.github.com/1047524396/9754a44845578358f6a403...

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.