Summary
Zeng Yunxiang discovered that FFmpeg incorrectly handled memory during
video encoding. An attacker could possibly use this issue to perform a
denial of service, or execute arbitrary code.
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | ffmpeg | 7:2.8.17-0ubuntu0.1+esm8 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | ffmpeg | 7:3.4.11-0ubuntu0.1+esm6 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | ffmpeg | 7:4.2.7-0ubuntu0.1+esm6 |
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | ffmpeg | 7:4.4.2-0ubuntu0.22.04.1+esm5 |
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | ffmpeg | 7:6.1.1-3ubuntu5+esm2 |
Vulnerabilities 1
-
High 7.8
FFmpeg 7.0 is vulnerable to Buffer Overflow. There is a negative-size-param bug at libavcodec/mpegvideo_enc.c:1216:21 i…
References
-
report
https://ubuntu.com/security/CVE-2024-32230