Lucene search

K
nvd[email protected]NVD:CVE-2024-32228
HistoryJul 01, 2024 - 9:15 p.m.

CVE-2024-32228

2024-07-0121:15:03
CWE-120
CWE-121
web.nvd.nist.gov
2
ffmpeg
buffer overflow
vulnerability
libavcodec
hevcdec

6.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

0.0004 Low

EPSS

Percentile

9.2%

FFmpeg 7.0 is vulnerable to Buffer Overflow. There is a SEGV at libavcodec/hevcdec.c:2947:22 in hevc_frame_end.

6.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

0.0004 Low

EPSS

Percentile

9.2%

Related for NVD:CVE-2024-32228