CVE-2024-36616

Name of the Vulnerable Software and Affected Versions FFmpeg version 6.1.1

Description The issue is related to an integer overflow in the libavformat/westwood vqa.c component of the FFmpeg library. This can be exploited by a remote attacker using a specially crafted VQA file, potentially leading to a denial of service.

Recommendations For FFmpeg version 6.1.1, consider disabling the use of the westwood vqa.c component until a patch is available to prevent potential denial of service attacks via crafted VQA files.