CVE-2024-36619
Fixed in a distro release EPSS <1%CVSS 5.3
FFmpeg n6.1.1 has a vulnerability in the WAVARC decoder of the libavcodec library which allows for an integer overflow when handling certain block types, leading to a denial-of-service (DoS) condition.
Products: FFMPEG
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian:13 | ffmpeg | 7:7.1-3 |
| Debian:14 | ffmpeg | 7:7.1-3 |
| Ubuntu:Pro:14.04:LTS | libav | no fix |
| Ubuntu:Pro:16.04:LTS | ffmpeg | 7:2.8.17-0ubuntu0.1+esm12 |
| Ubuntu:Pro:18.04:LTS | ffmpeg | 7:3.4.11-0ubuntu0.1+esm10 |
| Ubuntu:Pro:20.04:LTS | ffmpeg | 7:4.2.7-0ubuntu0.1+esm10 |
| Ubuntu:Pro:22.04:LTS | ffmpeg | 7:4.4.2-0ubuntu0.22.04.1+esm9 |
| Ubuntu:Pro:24.04:LTS | ffmpeg | 7:6.1.1-3ubuntu5+esm5 |
| openSUSE:Tumbleweed | ffmpeg-7 | 7.1.1-4.1 |