Search
Search is not available in local development.
Run npx pagefind --site __site after building to enable it.
JLSEC-2025-136 Medium 5.5

In FFmpeg version n6.1.1, specifically within the `avcodec/speexdec.c` module, a potential security...

JLSEC Published
Modified
Severity
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected Packages
FFMPEG_jll >= 6.1.1+0, < 6.1.2+0

In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists due to insufficient validation of certain parameters when parsing Speex codec extradata. This vulnerability could lead to integer overflow conditions, potentially resulting in undefined behavior or crashes during the decoding process.

References