CVE-2024-22862
9.8CRITICALInteger overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the JJPEG XL Parser.
Publicado: 1/27/2024Actualizado: 8/11/2025
Descripción
Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the JJPEG XL Parser.
Análisis IAImpulsado por IA
Productos Afectados
ffmpegffmpeg
6.1
Referencias
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62113Mailing List
- https://github.com/FFmpeg/FFmpeg/commit/ca09d8a0dcd82e3128e62463231296aaf63ae6f7Patch
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62113Mailing List
- https://github.com/FFmpeg/FFmpeg/commit/ca09d8a0dcd82e3128e62463231296aaf63ae6f7Patch