Null Pointer Dereference in FFmpeg 7.1

CVE-2024-55069

What is CVE-2024-55069?

FFmpeg version 7.1 is susceptible to a Null Pointer Dereference within the iamf_read_header function located in /libavformat/iamfdec.c. This vulnerability can cause unexpected behavior or application crashes, potentially allowing for further exploitation of the system. Users and administrators should evaluate their usage of FFmpeg 7.1 and apply necessary mitigations, while awaiting a patch from the vendor.

References