FFmpeg version n6.1.1 was discovered to contain a heap use-after-free via the avhwframectx_init function.
[
{
"signature_version": "v1",
"id": "CVE-2024-31578-4b2f2022",
"source": "https://github.com/ffmpeg/ffmpeg/commit/3bb00c0a420c3ce83c6fafee30270d69622ccad7",
"digest": {
"line_hashes": [
"302949644620435468441044300091821951035",
"243074190726614044512948110437361033864",
"328825417596194912515047406282623810869",
"84428823915742586028136893640031092358",
"172972351806866393371537564527411699773",
"270232633987988822202638566524150499096",
"236989691927634449535880270271258022599",
"317859594545560200518548585338944678641",
"93157762065430023358173760086905165396",
"88643534072495792191289124522925364678",
"49626557380245906940183847401969645190",
"101991771897895825016391983961468166253",
"41714239550716467975293458656148977174",
"339930604436678801739963849326898505022"
],
"threshold": 0.9
},
"deprecated": false,
"target": {
"file": "libavutil/hwcontext.c"
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"id": "CVE-2024-31578-7f3f9593",
"source": "https://github.com/ffmpeg/ffmpeg/commit/3bb00c0a420c3ce83c6fafee30270d69622ccad7",
"digest": {
"length": 1101.0,
"function_hash": "7161195674442884809513023929311737907"
},
"deprecated": false,
"target": {
"function": "av_hwframe_ctx_init",
"file": "libavutil/hwcontext.c"
},
"signature_type": "Function"
}
]