FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder.
{
"versions": [
{
"introduced": "0"
},
{
"fixed": "3.4.14"
},
{
"introduced": "4.0"
},
{
"fixed": "4.2.9"
},
{
"introduced": "4.3"
},
{
"fixed": "4.3.7"
},
{
"introduced": "4.4"
},
{
"fixed": "4.4.5"
},
{
"introduced": "5.0"
},
{
"fixed": "6.1.2"
}
]
}"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-36617.json"
[
{
"deprecated": false,
"target": {
"file": "libavformat/cafdec.c"
},
"digest": {
"line_hashes": [
"44973636752222320202739228100696163360",
"274436137156896354455671107439876243104",
"184972138392671777370760264547244923719",
"236992614078391776037833767438845251703"
],
"threshold": 0.9
},
"source": "https://github.com/ffmpeg/ffmpeg/commit/d973fcbcc2f944752ff10e6a76b0b2d9329937a7",
"signature_version": "v1",
"id": "CVE-2024-36617-1c8c6403",
"signature_type": "Line"
},
{
"deprecated": false,
"target": {
"function": "read_pakt_chunk",
"file": "libavformat/cafdec.c"
},
"digest": {
"length": 1265.0,
"function_hash": "82835186559573989995264497669114067249"
},
"source": "https://github.com/ffmpeg/ffmpeg/commit/d973fcbcc2f944752ff10e6a76b0b2d9329937a7",
"signature_version": "v1",
"id": "CVE-2024-36617-b1262d81",
"signature_type": "Function"
}
]