Wind River Support Network

HomeDefectsLIN1019-11888

Fixed

LIN1019-11888 : Security Advisory - ffmpeg - CVE-2024-31578

Created: Apr 17, 2024 Updated: Dec 11, 2024

Resolved Date: Jun 25, 2024

Found In Version: 10.19.45.1

Fix Version: 10.19.45.32

Severity: Standard

Applicable for: Wind River Linux LTS 19

Component/s: Userspace

Description

FFmpeg version n6.1.1 was discovered to contain a heap use-after-free via the av_hwframe_ctx_init function.

CREATE(Triage):(User=admin) CVE-2024-31578 (https://nvd.nist.gov/vuln/detail/CVE-2024-31578)

CVEs

CVE-2024-31578