CVE-2024-36618

{"id": "CVE-2024-36618", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.2, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.5}]}, "published": "2024-11-29T18:15:07.390", "references": [{"url": "https://gist.github.com/1047524396/a148f3679415a6da53ca112eb2ba1523", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/FFmpeg/FFmpeg/blob/n6.1.1/libavformat/avidec.c#L1699", "tags": ["Product"], "source": "cve@mitre.org"}, {"url": "https://github.com/ffmpeg/ffmpeg/commit/7a089ed8e049e3bfcb22de1250b86f2106060857", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00000.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-190"}]}], "descriptions": [{"lang": "en", "value": "FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, potentially resulting in a denial-of-service (DoS) condition."}, {"lang": "es", "value": "FFmpeg n6.1.1 tiene una vulnerabilidad en el demuxer AVI de la librer\u00eda libavformat que permite un desbordamiento de enteros, lo que potencialmente resulta en una condici\u00f3n de denegaci\u00f3n de servicio (DoS)."}], "lastModified": "2025-11-03T21:16:12.853", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ffmpeg:ffmpeg:6.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "53C87DB5-4F23-45F8-A2F1-BD69CEAC54E2"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}