OESA-2024-1877 ffmpeg security update

🗓️ 19 Jul 2024 11:08:35Reported by GoogleType

osv

osv🔗 osv.dev

FFmpeg security update fixes g729 parser overflow, use-after-free in threads, and mpeg video encoding overflow.

Reporter	Title	Published	Views	Family All 174
IBM Security Bulletins	Security Bulletin: IBM Watson Machine Learning Accelerator for IBM Cloud Pak for Data is affected by multiple vulnerabilities.	19 Feb 202617:06	–	ibm
ATTACKERKB	CVE-2022-1475	2 May 202219:15	–	attackerkb
ATTACKERKB	CVE-2022-48434	29 Mar 202317:15	–	attackerkb
AlpineLinux	CVE-2022-1475	2 May 202219:15	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в ffmpeg	20 May 202605:53	–	astralinux
AstraLinux	Astra Linux - уязвимость в ffmpeg, ffmpeg5	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability in the `libavcodec/pthread_frame.c` component of the multimedia library FFmpeg, related to the use of memory after it is freed, allows a hacker to execute arbitrary code.	31 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `load_input_picture` function in the FFmpeg multimedia library allows a hacker to execute arbitrary code.	18 Sep 202400:00	–	bdu_fstec
Cloud Foundry	USN-5472-1: FFmpeg vulnerabilities \| Cloud Foundry	28 Jul 202200:00	–	cloudfoundry
Circl	CVE-2022-1475	2 May 202222:28	–	circl

Source	Link
openeuler	www.openeuler.org/zh/security/security-bulletins/detail/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-1475
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-48434
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-32230

03 Sep 2025 06:17Current

8High risk

Vulners AI Score8

CVSS 24.3

CVSS 3.18.1

EPSS0.0032

SSVC

seven two nine overflow use after free video encoding overflow