alpine · CVE-2024-36616

Quick triage

View at Official alpine advisory, NVD, CVE.org · CVE detail

Freshness: no update timestamp found; verify against the upstream OS advisory manually.

Tracker summary

CVE-2024-36616: 1 source package rows (ffmpeg); 11 state rows across 1 repos (edge-community); fixed 0, open 11.

Description:

An integer overflow in the component /libavformat/westwood_vqa.c of FFmpeg n6.1.1 allows attackers to cause a denial of service in the application via a crafted VQA file.