CVE-2024-22860: Integer Overflow
Published Jan 27, 2024
·Updated
Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the jpegxlanimreadpacket component in the JPEG XL Animation decoder.
Affected Software
1 affected component
FFmpeg FFmpeg=6.1
Remediation
Event History
Jan 27, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-22860?
CVE-2024-22860 has a high severity rating due to its potential to allow remote attackers to execute arbitrary code.
2
How do I fix CVE-2024-22860?
To fix CVE-2024-22860, upgrade to FFmpeg version 6.1 or later.
3
What components are affected by CVE-2024-22860?
CVE-2024-22860 affects the jpegxl_anim_read_packet component in the JPEG XL Animation decoder of FFmpeg.
4
Who is at risk from CVE-2024-22860?
Any users or systems running versions of FFmpeg prior to 6.1 are at risk from CVE-2024-22860.
5
Can CVE-2024-22860 be exploited remotely?
Yes, CVE-2024-22860 can be exploited remotely by attackers to execute arbitrary code.