All vulnerabilities

Servers and applications

CVE-2024-35369

In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists due to insufficient validation of certain parameters when parsing Speex codec extradata. This vulnerability could lead to integer overflow conditions, potentially resulting in undefined behavior or crashes during the decoding process.

Severity
Medium 5.5
Published
29 Nov 2024
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
FFmpegServers and applications · cpe:a:ffmpeg:ffmpeg
  • Version 6.1.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-35369
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-35369