Ubuntu Security Update USN-7823-1: FFmpeg vulnerabilities

LinuxBot

Member
Joined
Apr 25, 2017
Messages
5,777
Reaction score
74
Credits
-1,257
It was discovered that FFmpeg did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 24.04 LTS. (CVE-2024-35365) It was discovered that FFmpeg did not correctly handle certain integer calculations. An attacker could possibly use this issue to cause a denial of service. (CVE-2024-35366) It was discovered that FFmpeg may perform an out-of-bounds read under certain circumstances. An attacker could possibly use this issue to cause a denial of service. (CVE-2024-35367) It was discovered that FFmpeg did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2024-35368) It was discovered that FFmpeg did not correctly handle certain inputs, which could lead to an integer overflow. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2024-36613, CVE-2024-36616, CVE-2024-36618) It was discovered that FFmpeg did not correctly handle certain inputs, which could lead to an integer overflow. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 24.04 LTS. (CVE-2024-36619) It was discovered that FFmpeg did not correctly handle certain memory operations. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2024-7055)

Continue reading...
 


Follow Linux.org

Members online

No members online now.

Top