Описание
FFmpeg version n6.1.1 was discovered to contain a heap use-after-free via the av_hwframe_ctx_init function.
FFmpeg version n6.1.1 was discovered to contain a heap use-after-free via the av_hwframe_ctx_init function.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2024-31578
- https://github.com/ffmpeg/ffmpeg/commit/3bb00c0a420c3ce83c6fafee30270d69622ccad7
- https://gist.github.com/1047524396/45400cce5859d78dcd3a62010df8d179
- https://lists.debian.org/debian-lts-announce/2024/10/msg00019.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY
Связанные уязвимости
CVSS3: 7.5
ubuntu
почти 2 года назад
FFmpeg version n6.1.1 was discovered to contain a heap use-after-free via the av_hwframe_ctx_init function.
CVSS3: 7.5
nvd
почти 2 года назад
FFmpeg version n6.1.1 was discovered to contain a heap use-after-free via the av_hwframe_ctx_init function.
CVSS3: 7.5
debian
почти 2 года назад
FFmpeg version n6.1.1 was discovered to contain a heap use-after-free ...
CVSS3: 7.5
fstec
почти 2 года назад
Уязвимость функции av_hwframe_ctx_init мультимедийной библиотеки FFmpeg, позволяющая нарушителю оказать воздействие на целостность данных
