CVE-2024-22862
9.8CRITICALInteger overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the JJPEG XL Parser.
Published: 1/27/2024Updated: 8/11/2025
Description
Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the JJPEG XL Parser.
AI AnalysisPowered by AI
Affected Products
ffmpegffmpeg
6.1
References
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62113Mailing List
- https://github.com/FFmpeg/FFmpeg/commit/ca09d8a0dcd82e3128e62463231296aaf63ae6f7Patch
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62113Mailing List
- https://github.com/FFmpeg/FFmpeg/commit/ca09d8a0dcd82e3128e62463231296aaf63ae6f7Patch