]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/commit
ffmpeg: fix CVE-2024-36613
authorArchana Polampalli <archana.polampalli@windriver.com>
Fri, 14 Feb 2025 10:49:27 +0000 (10:49 +0000)
committerSteve Sakoman <steve@sakoman.com>
Wed, 19 Feb 2025 14:43:20 +0000 (06:43 -0800)
commit1af53c8dd20662e720ac4dad31833a9d776b795a
tree5a2661ebc17ea0089dcc030279eb8c001cdf57ef
parent52cbeaa086d2cc0c0aae46deb4193ccb5427ecdc
ffmpeg: fix CVE-2024-36613

FFmpeg n6.1.1 has a vulnerability in the DXA demuxer of the libavformat library
allowing for an integer overflow, potentially resulting in a denial-of-service (DoS)
condition or other undefined behavior.

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
meta/recipes-multimedia/ffmpeg/ffmpeg/CVE-2024-36613.patch [new file with mode: 0644]
meta/recipes-multimedia/ffmpeg/ffmpeg_5.0.1.bb