Skip to content

Instantly share code, notes, and snippets.

@1047524396
Created April 15, 2024 11:40
Show Gist options
  • Save 1047524396/45400cce5859d78dcd3a62010df8d179 to your computer and use it in GitHub Desktop.
Save 1047524396/45400cce5859d78dcd3a62010df8d179 to your computer and use it in GitHub Desktop.
CVE-2024-31578
[CVE ID]
CVE-2024-31578
[PRODUCT]
FFmpeg
[VERSION]
all the release version including lastest version n6.1.1
[PROBLEM TYPE]
CWE-416: Use After Free
[DESCRIPTION]
FFmpeg version n6.1.1 was discovered to contain a heap use-after-free via the av_hwframe_ctx_init function.
[PATCH LINK]
https://github.com/ffmpeg/ffmpeg/commit/3bb00c0a420c3ce83c6fafee30270d69622ccad7
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment