Astra Linux – vulnerability in ffmpeg, ffmpeg5

FFmpeg n6.1.1 contains an integer overflow vulnerability. The flaw resides in the parseoptions function within sbgdec.c, part of the libavformat module. During the parsing of certain options, the software fails to perform adequate validation of inputs. As a result, negative duration values can be...

PT-2024-10422

Name of the Vulnerable Software and Affected Versions FFmpeg version 6.1.1 Description The issue is related to an integer overflow vulnerability in the parse options function of sbgdec.c within the libavformat module. This vulnerability allows for negative duration values to be accepted without...