CVE-2024-22862
9.8CRITICALInteger overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the JJPEG XL Parser.
Опубликовано: 1/27/2024Обновлено: 8/11/2025
Описание
Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the JJPEG XL Parser.
ИИ-АнализНа базе ИИ
Затронутые продукты
ffmpegffmpeg
6.1
Ссылки
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62113Mailing List
- https://github.com/FFmpeg/FFmpeg/commit/ca09d8a0dcd82e3128e62463231296aaf63ae6f7Patch
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62113Mailing List
- https://github.com/FFmpeg/FFmpeg/commit/ca09d8a0dcd82e3128e62463231296aaf63ae6f7Patch