HomeFfmpegCVE-2024-35367

CVE-2024-35367

CRITICAL
9.1CVSS
Published: 2024-11-29
Updated: 2025-11-03
AI Analysis

Description

FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dsp_altivec.c, static const vec_s8 h_subpel_filters_outer

CVSS Metrics

Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Attack Vector
network
Complexity
low
Privileges
none
User Action
none
Scope
unchanged
Confidentiality
high
Integrity
none
Availability
high
Weaknesses
CWE-125

Metadata

Primary Vendor
FFMPEG
Published
11/29/2024
Last Modified
11/3/2025
Source
NIST NVD
Note: Verify all details with official vendor sources before applying patches.

Affected Products

ffmpeg : ffmpeg

AI-Powered Remediation

Generate remediation guidance or a C-suite brief for this vulnerability.

Executive Intelligence Brief

CVE-CVE-2024-35367 | CRITICAL Severity | CVEDatabase.com | CVEDatabase.com