CVE-2024-36617

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-36617
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-36617.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-36617
Downstream
Published
2024-11-29T18:15:07.230Z
Modified
2026-02-24T11:49:26.909010Z
Severity
  • 6.2 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder.

References

Affected packages

Git / github.com/ffmpeg/ffmpeg

Affected ranges

Type
GIT
Repo
https://github.com/ffmpeg/ffmpeg
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
62e1c442633e8a09a1407a789cd2b50611850788
Introduced
390d6853d0ef408007feb39c0040682c81c02751
Fixed
b1a4534186ca51b0457579fc05a5739eb2cc45cd
Introduced
80bb65fafab1d2f5f58a8453c6334c784ee27c08
Fixed
41a5eae142c8f00980ae6d58bf3cf8a869e5231a
Introduced
ace829cb45cff530b8a0aed6adf18f329d7a98f6
Fixed
b0fe83714bba7269dc76a5ab9ca0d87b311b0aee
Introduced
c5079bf3bccd24bf8ed45ff47ff4071fd09e9fd8
Fixed
9bcede27c26b2f7cd469ab6b5c8b9694c30cfca3

Affected versions

n4.*
n4.3
n4.3-dev
n4.3.1
n4.3.2
n4.3.3
n4.3.4
n4.3.5
n4.3.6
n4.4
n4.4-dev
n4.4.1
n4.4.2
n4.4.3
n4.4.4
n4.5-dev
n5.*
n5.1-dev
n5.2-dev
n6.*
n6.1
n6.1-dev
n6.1.1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-36617.json"