PT-2024-26462
CVE-2024-35367
·
Published
2024-11-29
·
Updated
2026-10-06
Description by
CVSS 2.0
9.4
CriticalMetricsAV:N/AC:L/Au:N/C:C/I:N/A:C
Name of the Vulnerable Software and Affected Versions
FFmpeg version 6.1.1
Description
The issue is an Out-of-bounds Read via libavcodec/ppc/vp8dsp altivec.c, specifically affecting the
h subpel filters outer variable. This is a general information about the problem, and no estimated number of potentially affected devices or real-world incidents are provided.Recommendations
For FFmpeg version 6.1.1, as a temporary workaround, consider restricting access to the
libavcodec component until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability. Found an issue in the description? Have something to add? Feel free to write us 👾