HomeDefectsLIN1024-2480
Fixed

LIN1024-2480 : Security Advisory - ffmpeg - CVE-2024-32230

Created: Jul 1, 2024    Updated: Sep 30, 2024
Resolved Date: Sep 29, 2024
Found In Version: 10.24.33.1
Fix Version: 10.24.33.3
Severity: Standard
Applicable for: Wind River Linux LTS 24
Component/s: Userspace

Description

FFmpeg 7.0 is vulnerable to Buffer Overflow. There is a negative-size-param bug at libavcodec/mpegvideo_enc.c:1216:21 in load_input_picture in FFmpeg7.0

CREATE(Triage):(User=admin) CVE-2024-32230 (https://nvd.nist.gov/vuln/detail/CVE-2024-32230)

CVEs