VDB

DEBIAN-CVE-2024-31578

DEBIAN-CVE-2024-31578 PUBLISHED CVSS 7.5 HIGH

FFmpeg version n6.1.1 was discovered to contain a heap use-after-free via the av_hwframe_ctx_init function.

Risk Scores

CVSS v3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected Products

VendorProductVersions
Debian:12ffmpeg6.1.1-4, 7.0.1-5, 7.0.2-1
Debian:14ffmpeg0, 0
Debian:11ffmpeg7:4.3.2-2, 7:4.3.3-0+deb11u1, 7:4.3.6-0+deb11u1
Debian:13ffmpeg0, 0

Timeline

  • Apr 17, 2024 CVE Published
  • Apr 28, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›