Wind River Support Network

HomeDefectsLIN1023-10019

Fixed

LIN1023-10019 : Security Advisory - ffmpeg - CVE-2024-32230

Created: Jan 6, 2025 Updated: Apr 9, 2025

Resolved Date: Mar 24, 2025

Found In Version: 10.23.30.1

Fix Version: 10.23.30.16

Severity: Standard

Applicable for: Wind River Linux LTS 23

Component/s: Userspace

Description

FFmpeg 7.0 is vulnerable to Buffer Overflow. There is a negative-size-param bug at libavcodec/mpegvideo_enc.c:1216:21 in load_input_picture in FFmpeg7.0

CREATE(Triage):(User=admin) CVE-2024-32230 (https://nvd.nist.gov/vuln/detail/CVE-2024-32230)

CVEs

CVE-2024-32230