Описание
FFmpeg version n6.1.1 has a double-free vulnerability in the fftools/ffmpeg_mux_init.c component of FFmpeg, specifically within the new_stream_audio function.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| ffmpeg | fixed | 7:7.0.1-3 | package | |
| ffmpeg | not-affected | bookworm | package | |
| ffmpeg | not-affected | bullseye | package |
Примечания
Introduced by: https://github.com/FFmpeg/FFmpeg/commit/83ace80bfd80fcdba2c65fa1d554923ea931d5bd (n6.1)
Fixed by: https://github.com/ffmpeg/ffmpeg/commit/ced5c5fdb8634d39ca9472a2026b2d2fea16c4e5 (n7.0)
EPSS
Связанные уязвимости
FFmpeg version n6.1.1 has a double-free vulnerability in the fftools/ffmpeg_mux_init.c component of FFmpeg, specifically within the new_stream_audio function.
FFmpeg version n6.1.1 has a double-free vulnerability in the fftools/ffmpeg_mux_init.c component of FFmpeg, specifically within the new_stream_audio function.
FFmpeg version n6.1.1 has a double-free vulnerability in the fftools/ffmpeg_mux_init.c component of FFmpeg, specifically within the new_stream_audio function.
FFmpeg version n6.1.1 has a double-free vulnerability in the fftools/ffmpeg_mux_init.c component of FFmpeg, specifically within the new_stream_audio function.
Уязвимость функции new_stream_audio в файле fftools/ffmpeg_mux_init.c мультимедийной библиотеки FFmpeg, позволяющая нарушителю выполнить произвольный код
EPSS