alpine · CVE-2024-35367

Quick triage

View at Official alpine advisory, NVD, CVE.org · CVE detail

Freshness: no update timestamp found; verify against the upstream OS advisory manually.

Tracker summary

CVE-2024-35367: 1 source package rows (ffmpeg); 2 state rows across 2 repos (3.20-community, edge-community); fixed 1, open 1.

Description:

FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dsp_altivec.c, static const vec_s8 h_subpel_filters_outer