CVE-2024-36617: Integer Overflow
FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/ffmpegto a version that resolves this vulnerability.Fixed in 7:5.1.5-0+deb12u1 - Upgrade
Upgrade
debian/ffmpegto a version that resolves this vulnerability.Fixed in 7:7.0.1-3 - Upgrade
Upgrade
debian/ffmpegto a version that resolves this vulnerability.Fixed in 7:5.1.9-0+deb12u1Fixed in 7:7.1.5-0+deb13u1Fixed in 7:9.0.2-4 - Upgrade
Upgrade
alpine/ffmpegto a version that resolves this vulnerability.Fixed in 7.1.1-r0
Event History
Frequently Asked Questions
What is the severity of CVE-2024-36617?
CVE-2024-36617 is classified as a high-severity vulnerability due to the potential for exploitation via integer overflow.
How do I fix CVE-2024-36617?
To remediate CVE-2024-36617, upgrade your FFmpeg installation to version 7:5.1.6-0+deb12u1 or 7:7.1-3.
What software is affected by CVE-2024-36617?
CVE-2024-36617 affects FFmpeg versions prior to 7:5.1.6-0+deb12u1 and 7:7.1-3.
What vulnerabilities does CVE-2024-36617 introduce?
CVE-2024-36617 introduces an integer overflow vulnerability in the FFmpeg CAF decoder, which could lead to potential code execution.
When was CVE-2024-36617 last updated?
CVE-2024-36617 was last updated on 8 January 2025.