CVE-2024-36619: Integer Overflow
Published Nov 29, 2024
·Updated
FFmpeg n6.1.1 has a vulnerability in the WAVARC decoder of the libavcodec library which allows for an integer overflow when handling certain block types, leading to a denial-of-service (DoS) condition.
Affected Software
2 affected components
FFmpeg FFmpeg
FFmpeg FFmpeg=6.1.1
Remediation
Event History
Nov 29, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-36619?
CVE-2024-36619 is classified as a denial-of-service (DoS) vulnerability, which can disrupt normal functionality.
2
How do I fix CVE-2024-36619?
To fix CVE-2024-36619, upgrade to a patched version of FFmpeg that addresses the integer overflow issue in the WAVARC decoder.
3
Which versions of FFmpeg are affected by CVE-2024-36619?
CVE-2024-36619 affects FFmpeg versions prior to the fixed release that addresses the vulnerability.
4
What type of vulnerability is CVE-2024-36619?
CVE-2024-36619 is an integer overflow vulnerability in the WAVARC decoder of the libavcodec library.
5
Can CVE-2024-36619 lead to data loss?
While CVE-2024-36619 primarily results in a denial-of-service condition, it does not directly cause data loss.