CVE-2024-35366

Vulnerability Summary

Integer Overflow Vulnerability in FFmpeg n6.1.1's libavformat Module

FFmpeg version n6.1.1 has an Integer Overflow vulnerability. This problem is in the parse_options function of sbgdec.c inside the libavformat module. When it parses some options, the software fails to check inputs correctly. Because of this, it accepts negative duration values without checking the limits properly.

Vulnerability Trend

References