HomeDefectsLIN1023-4842
Fixed

LIN1023-4842 : Security Advisory - ffmpeg - CVE-2024-31585

Created: Apr 17, 2024    Updated: Aug 8, 2024
Resolved Date: Jul 11, 2024
Found In Version: 10.23.30.1
Fix Version: 10.23.30.12
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: Userspace

Description

FFmpeg version n5.1 to n6.1 was discovered to contain an Off-by-one Error vulnerability in libavfilter/avf_showspectrum.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

CREATE(Triage):(User=admin) CVE-2024-31585 (https://nvd.nist.gov/vuln/detail/CVE-2024-31585)

CVEs