Bug 2295065 (CVE-2024-32229) - CVE-2024-32229 ffmpeg: heap-buffer-overflow
Summary: CVE-2024-32229 ffmpeg: heap-buffer-overflow
Keywords:
Status: NEW
Alias: CVE-2024-32229
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2295384 2295382 2295383 2295385 2295386
Blocks:
TreeView+ depends on / blocked
 
Reported: 2024-07-01 22:41 UTC by OSIDB Bzimport
Modified: 2025-03-07 00:52 UTC (History)
0 users

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2024-07-01 22:41:03 UTC 
FFmpeg 7.0 contains a heap-buffer-overflow at libavfilter/vf_tiltandshift.c:189:5 in copy_column.
Comment 1 Dominik 'Rathann' Mierzejewski 2025-03-07 00:52:11 UTC 
This is https://trac.ffmpeg.org/ticket/10950 .
Fixed in FFmpeg-7.0.2 (2df8aaa8c58d9372bd0e1472ea387c2be86d3e21).
Fixed in FFmpeg-7.1   (a528a54ee119dcba47e7c9e30d3a56206fbad416).
pre-7.0 are not affected, because the vf_tiltandshift filter was added in 7.0.
Note You need to log in before you can comment on or make changes to this bug.