Heap-based Buffer Overflow in FFmpeg's pnm_decode_frame Function
CVE-2024-7055
Key Information:
Badges
What is CVE-2024-7055?
A critical vulnerability affecting FFmpeg versions up to 7.0.1 has been identified in the pnm_decode_frame function within the library located at /libavcodec/pnmdec.c. This vulnerability results in a heap-based buffer overflow, which can be exploited by attackers to execute arbitrary code remotely. As this flaw has been publicly disclosed, it poses a significant risk to systems using the affected versions of FFmpeg. Users are strongly advised to upgrade their software to version 7.0.2 or later to mitigate the associated risks and enhance their overall security posture. For further details on the vulnerability and patching, refer to the FFmpeg official site.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
FFmpeg 7.0.0
FFmpeg 7.0.1
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
CVSS V4
Timeline
- 🟡
Public PoC available
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved