Skip to content

Instantly share code, notes, and snippets.

@1047524396

1047524396/CVE-2024-35366

Last active November 29, 2024 04:10
Show Gist options
  • Save 1047524396/1e72f170d58c2547ebd4db4cdf6cfabf to your computer and use it in GitHub Desktop.
Save 1047524396/1e72f170d58c2547ebd4db4cdf6cfabf to your computer and use it in GitHub Desktop.
Download ZIP
CVE-2024-35366
Raw
CVE-2024-35366
[CVE ID]
CVE-2024-35366
[PRODUCT]
FFmpeg
[VERSION]
n6.1.1
[PROBLEM TYPE]
Integer Overflow
[DESCRIPTION]
FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options function of sbgdec.c within the libavformat module. When parsing certain options, the software does not adequately validate the input. This allows for negative duration values to be accepted without proper bounds checking.
[PATCH LINK]
https://github.com/ffmpeg/ffmpeg/commit/0bed22d597b78999151e3bde0768b7fe763fc2a6
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment