CVE-2024-36617 - FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder · CoreCVE

Back Back to CVE browser

MEDIUM

FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder

Published Nov 29, 2024

6.2

MEDIUM

CVSS 3.1

EPSS 0.24%

Description

FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-190

Integer Overflow

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-36354
Advisory
https://gist.github.com/1047524396/f20749f8addc8f86de9cfacf17ba29df
Third Party Advisory
https://github.com/FFmpeg/FFmpeg/blob/n6.1.1/libavformat/cafdec.c#L274
Product
https://github.com/ffmpeg/ffmpeg/commit/d973fcbcc2f944752ff10e6a76b0b2d9329937a7
Patch

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-36354		Advisory
https://gist.github.com/1047524396/f20749f8addc8f86de9cfacf17ba29df		Third Party Advisory
https://github.com/FFmpeg/FFmpeg/blob/n6.1.1/libavformat/cafdec.c#L274		Product
https://github.com/ffmpeg/ffmpeg/commit/d973fcbcc2f944752ff10e6a76b0b2d9329937a7		Patch

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Nov 29, 2024

Updated Dec 2, 2024

Reserved May 30, 2024

Link CVE-2024-36617

CISA Vulnrichment

Updated Dec 2, 2024

Status Analyzed

Modified Jun 17, 2026

Link CVE-2024-36617

Severity n/a

Public date n/a

Links CVE-2024-36617

Assigner mitre

Published Nov 29, 2024

Updated Dec 2, 2024

Exploited since n/a

Link EUVD-2024-36354

EUVD-2024-36354