CVE-2024-31581
Fixed in a distro release EPSS 1%CVSS 9.8
FFmpeg version n6.1 was discovered to contain an improper validation of array index vulnerability in libavcodec/cbs_h266_syntax_template.c. This vulnerability allows attackers to cause undefined behavior within the application.
Products: FFMPEG
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian:13 | ffmpeg | 7:7.0.1-3 |
| Debian:14 | ffmpeg | 7:7.0.1-3 |
| Ubuntu:25.04 | ffmpeg | 7:7.1.1-1ubuntu1.1 |