Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-31581

Fixed in a distro release EPSS 1%CVSS 9.8

FFmpeg version n6.1 was discovered to contain an improper validation of array index vulnerability in libavcodec/cbs_h266_syntax_template.c. This vulnerability allows attackers to cause undefined behavior within the application.

Published 2024-04-17 · CVE record · OSV

Products: FFMPEG

Distro releases

ReleasePackageFixed in
Debian:13ffmpeg7:7.0.1-3
Debian:14ffmpeg7:7.0.1-3
Ubuntu:25.04ffmpeg7:7.1.1-1ubuntu1.1