Search
Search is not available in local development.
Run npx pagefind --site __site after building to enable it.
JLSEC-2025-140 Critical 9.1

FFmpeg n6.1.1 is Integer Overflow

SourceEditHistoryOSVJSON (OSV)
JLSEC Published
Modified
Severity
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Affected Packages
FFMPEG_jll >= 6.1.1+0, < 6.1.2+0
Upstream
CVE-2024-35366

FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options function of sbgdec.c within the libavformat module. When parsing certain options, the software does not adequately validate the input. This allows for negative duration values to be accepted without proper bounds checking.

References