FFmpeg version n6.1 was discovered to contain a heap buffer overflow vulnerability in the draw_block_rectangle function of libavfilter/vf_codecview.c. This vulnerability allows attackers to cause undefined behavior or a Denial of Service (DoS) via crafted input.
References
Configurations
History
03 Jun 2025, 15:42
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Ffmpeg
Ffmpeg ffmpeg Fedoraproject Fedoraproject fedora |
|
| References | () https://gist.github.com/1047524396/b47d5efe3bc420fb91dbb77c73c0fff3 - Third Party Advisory | |
| References | () https://github.com/FFmpeg/FFmpeg/blob/n6.1.1/libavfilter/vf_codecview.c#L220 - Product | |
| References | () https://github.com/ffmpeg/ffmpeg/commit/99debe5f823f45a482e1dc08de35879aa9c74bd2 - Patch | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/ - Third Party Advisory | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/ - Third Party Advisory | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/ - Third Party Advisory | |
| CPE | cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:* cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:* |
Information
Published : 2024-04-17 19:15
Updated : 2025-06-03 15:42
NVD link : CVE-2024-31582
Mitre link : CVE-2024-31582
CVE.ORG link : CVE-2024-31582
JSON object : View
Products Affected
fedoraproject
- fedora
ffmpeg
- ffmpeg
CWE
CWE-122
Heap-based Buffer Overflow