Integer overflow in FFmpeg - CVE-2024-36619

Vulnerability identifier: #VU102574

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-36619

CWE-ID: CWE-190

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to integer overflow within the WAVARC decoder of the libavcodec library. A remote attacker can pass specially crafted data to the application, trigger an integer overflow and perform a denial of service (DoS) attack.

FFmpeg
Ubuntu
openEuler
ffmpeg (Ubuntu package)
ffmpeg
ffmpeg-debuginfo
ffmpeg-debugsource
ffmpeg-devel
ffmpeg-libs
libavdevice

Install updates from vendor's website.

FFmpeg - update to 6.1.2
ffmpeg (Ubuntu package) - addressed in versions 7:2.8.17-0ubuntu0.1+esm12, 7:3.4.11-0ubuntu0.1+esm10, 7:4.2.7-0ubuntu0.1+esm10, 7:4.4.2-0ubuntu0.22.04.1+esm9, 7:6.1.1-3ubuntu5+esm5
ffmpeg - update to 6.1.1-18
ffmpeg-debuginfo - update to 6.1.1-18
ffmpeg-debugsource - update to 6.1.1-18
ffmpeg-devel - update to 6.1.1-18
ffmpeg-libs - update to 6.1.1-18
libavdevice - update to 6.1.1-18

• https://gist.github.com/1047524396/fad68e8251f4e34a1bb838de697d5119
• https://github.com/FFmpeg/FFmpeg/blob/n6.1.1/libavcodec/wavarc.c#L651
• https://github.com/ffmpeg/ffmpeg/commit/28c7094b25b689185155a6833caf2747b94774a4

• Multiple DoS vulnerabilities in FFmpeg
• openEuler 24.03 LTS update for ffmpeg
• Ubuntu update for ffmpeg