Integer overflow in FFmpeg - CVE-2024-35366

Vulnerability identifier: #VU117350

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-35366

CWE-ID: CWE-190

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to integer overflow within the parse_options() function in sbgdec.c in libavformat module. A remote attacker can pass specially crafted data to the application, trigger an integer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

FFmpeg
Ubuntu
openEuler
ffmpeg (Ubuntu package)
ffmpeg
ffmpeg-debuginfo
ffmpeg-debugsource
ffmpeg-devel
ffmpeg-libs
libavdevice

Install updates from vendor's website.

FFmpeg - update to 7.0
ffmpeg (Ubuntu package) - addressed in versions 7:2.8.17-0ubuntu0.1+esm12, 7:3.4.11-0ubuntu0.1+esm10, 7:4.2.7-0ubuntu0.1+esm10, 7:4.4.2-0ubuntu0.22.04.1+esm9, 7:6.1.1-3ubuntu5+esm5
ffmpeg - update to 4.2.4-19
ffmpeg-debuginfo - update to 4.2.4-19
ffmpeg-debugsource - update to 4.2.4-19
ffmpeg-devel - update to 4.2.4-19
ffmpeg-libs - update to 4.2.4-19
libavdevice - update to 4.2.4-19

• https://gist.github.com/1047524396/1e72f170d58c2547ebd4db4cdf6cfabf
• https://github.com/FFmpeg/FFmpeg/blob/n6.1.1/libavformat/sbgdec.c#L389
• https://github.com/ffmpeg/ffmpeg/commit/0bed22d597b78999151e3bde0768b7fe763fc2a6

• Multiple vulnerabilities in FFmpeg
• Ubuntu update for ffmpeg
• openEuler update for ffmpeg