Integer Overflow Vulnerability in FFmpeg DXA Demuxer

CVE-2024-36613

What is CVE-2024-36613?

An integer overflow vulnerability exists within the DXA demuxer of the libavformat library in FFmpeg version n6.1.1. This flaw could be exploited to cause a denial-of-service (DoS) condition, leading to potential application crashes or other unpredictable behavior. Users and developers utilizing affected FFmpeg versions are advised to evaluate their systems and apply necessary mitigations to avoid exploitation of this vulnerability.

References