alpine · CVE-2024-36619

Quick triage

Priority: not assigned Published: Updated:

View at Official alpine advisory, NVD, CVE.org · CVE detail

Freshness: no update timestamp found; verify against the upstream OS advisory manually.

Tracker summary

CVE-2024-36619: 1 source package rows (ffmpeg); 12 state rows across 2 repos (3.20-community, edge-community); fixed 0, open 12.

Description:

FFmpeg n6.1.1 has a vulnerability in the WAVARC decoder of the libavcodec library which allows for an integer overflow when handling certain block types, leading to a denial-of-service (DoS) condition.

cvelogic Threat Intelligence