VDB
GHSA-9fr3-g426-jq79
GHSA-9fr3-g426-jq79
PUBLISHED
CVSS 5.900000095367432 MEDIUM
Record from GitHub Advisory Database · Published November 29, 2024
FFmpeg n7.0 has a race condition vulnerability in the VP9 decoder. This could lead to a data race if video encoding parameters were being exported, as the side data would be attached in the decoder thread while being read in the output thread.
Risk scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Timeline
- Nov 29, 2024 CVE Published
- Apr 10, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-9fr3-g426-jq79
vulnetix vdb fixes GHSA-9fr3-g426-jq79Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-9fr3-g426-jq79/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart