Out-of-bounds Read Vulnerability in FFmpeg Video Processing Library
CVE-2024-35367

Currently unrated

Key Information:

Vendor

FFmpeg

Status
Vendor
CVE Published:
29 November 2024

What is CVE-2024-35367?

An out-of-bounds read vulnerability exists in the FFmpeg video processing library version n6.1.1, specifically in the libavcodec module. This issue arises from the handling of certain video codecs, notably through the vp8dsp_altivec.c component. The vulnerability can potentially allow for unauthorized access to sensitive data or lead to unexpected application behavior, posing risks to system integrity and security. Proper mitigation measures and updates to the latest versions are essential to maintain software security.

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.