CVE-2024-22862
9.8CRITICALInteger overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the JJPEG XL Parser.
Publicado: 1/27/2024Atualizado: 8/11/2025
Descrição
Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the JJPEG XL Parser.
Análise IADesenvolvido por IA
Produtos Afetados
ffmpegffmpeg
6.1
Referências
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62113Mailing List
- https://github.com/FFmpeg/FFmpeg/commit/ca09d8a0dcd82e3128e62463231296aaf63ae6f7Patch
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62113Mailing List
- https://github.com/FFmpeg/FFmpeg/commit/ca09d8a0dcd82e3128e62463231296aaf63ae6f7Patch