Skip to main content

Heap-based Buffer Overflow

CVE-2024-31582

High
7.8/10

Summary

FFmpeg version n6.1 was discovered to contain a Heap Buffer Overflow vulnerability in the "draw_block_rectangle" function of "libavfilter/vf_codecview.c". This vulnerability allows attackers to cause undefined behavior or a Denial of Service (DoS) via crafted input. This issue affects FFmpeg versions n5.0 through n6.2-dev and 5.0 through 6.0.1.

  • LOW
  • LOCAL
  • HIGH
  • UNCHANGED
  • REQUIRED
  • NONE
  • HIGH
  • HIGH

CWE-122 - Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

References

Advisory Timeline

  • Published