VulnerabilityAnalyzed

CVE-2024-35366

FFmpeg n6.1.1 is Integer Overflow.

CRITICAL 9.1EPSS 0.65%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.65%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options function of sbgdec.c within the libavformat module. When parsing certain options, the software does not adequately validate the input. This allows for negative duration values to be accepted without proper bounds checking.

CVSS 3.1: 9.1 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
EPSS: 0.65% probability · 49th percentile
CISA KEV: Not listed
Weakness: CWE-190
Affected: ffmpeg/ffmpeg
Source: cve@mitre.org

References

https://gist.github.com/1047524396/1e72f170d58c2547ebd4db4cdf6cfabfThird Party Advisory
https://github.com/FFmpeg/FFmpeg/blob/n6.1.1/libavformat/sbgdec.c#L389Product
https://github.com/ffmpeg/ffmpeg/commit/0bed22d597b78999151e3bde0768b7fe763fc2a6Patch

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.