CVE-2024-31581: Out-of-bounds Read

Published Apr 17, 2024

Updated

FFmpeg version n6.1 was discovered to contain an improper validation of array index vulnerability in libavcodec/cbsh266syntaxtemplate.c. This vulnerability allows attackers to cause undefined behavior within the application.

Affected Software

5 affected components

FFmpeg

FFmpeg=6.1

fedoraproject fedora=38

fedoraproject fedora=39

fedoraproject fedora=40

Remediation

Patch Available

https://github.com/ffmpeg/ffmpeg/commit/ce0c178a408d43e71085c28a47d50dc939b60196

Event History

Apr 17, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·07:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-31581?

CVE-2024-31581 has been classified as a high-severity vulnerability due to its potential to cause undefined behavior in the application.

How do I fix CVE-2024-31581?

To fix CVE-2024-31581, upgrade to the latest version of FFmpeg that addresses this vulnerability.

What causes the vulnerability in CVE-2024-31581?

CVE-2024-31581 is caused by improper validation of array indices in the FFmpeg libavcodec library.

Which versions of FFmpeg are affected by CVE-2024-31581?

FFmpeg version n6.1 is specifically affected by CVE-2024-31581.

What types of attacks can exploit CVE-2024-31581?

Exploitation of CVE-2024-31581 can lead to undefined behavior, potentially allowing attackers to crash the application or execute arbitrary code.