CVE-2024-35367
Fixed in a distro release EPSS <1%CVSS 9.1
FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dsp_altivec.c, static const vec_s8 h_subpel_filters_outer
Products: FFMPEG
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 11 | ffmpeg | 7:4.3.8-0+deb11u2 |
| Debian 12 | ffmpeg | 7:5.1.7-0+deb12u1 |
| Debian 13 | ffmpeg | 7:7.0.1-3 |
| Debian 14 | ffmpeg | 7:7.0.1-3 |
| Ubuntu Pro 14.04 LTS | libav | no fix |
| Ubuntu Pro 16.04 LTS | ffmpeg | 7:2.8.17-0ubuntu0.1+esm12 |
| Ubuntu Pro 18.04 LTS | ffmpeg | 7:3.4.11-0ubuntu0.1+esm10 |
| Ubuntu Pro 20.04 LTS | ffmpeg | 7:4.2.7-0ubuntu0.1+esm10 |
| Ubuntu Pro 22.04 LTS | ffmpeg | 7:4.4.2-0ubuntu0.22.04.1+esm9 |
| Ubuntu Pro 24.04 LTS | ffmpeg | 7:6.1.1-3ubuntu5+esm5 |
| openSUSE Leap 16.0 | ffmpeg-7 | 7.1.5-160000.1.1 |
| openSUSE Tumbleweed | ffmpeg-4 | 4.4.8-6.1 |
| openSUSE Tumbleweed | ffmpeg-7 | 7.1.5-2.1 |