Skip to main content

Improper Validation of Array Index

CVE-2024-31581

High
9.8/10

Summary

FFmpeg was discovered to contain an improper validation of array index vulnerability in "libavcodec/cbs_h266_syntax_template.c". This vulnerability allows attackers to cause undefined behavior within the application. This issue affects FFmpeg versions n6.1, 6.1, and n6.2-dev.

  • LOW
  • NETWORK
  • HIGH
  • UNCHANGED
  • NONE
  • NONE
  • HIGH
  • HIGH

CWE-129 - Improper Validation of Array Index

The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

References

Advisory Timeline

  • Published