← All advisories

Critical severity9.1NVD Advisory· Published Nov 29, 2024· Updated Jun 17, 2026

CVE-2024-35367

CVE-2024-35367

Description

FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dsp_altivec.c, static const vec_s8 h_subpel_filters_outer

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

osv-coords
pkg:rpm/opensuse/ffmpeg-7&distro=openSUSE%20Tumbleweed
Range: < 7.1.5-2.1
FFmpeg/Ffmpegcpe-rescue3 versions
(expand)+ 2 more
- (no CPE)
- cpe:2.3:a:ffmpeg:ffmpeg:6.1.1:*:*:*:*:*:*:*
- (no CPE)range: <=n6.1.1

Patches

Vulnerability mechanics

References

4

github.com/ffmpeg/ffmpeg/commit/09e6840cf7a3ee07a73c3ae88a020bf27ca1a667nvdPatch
gist.github.com/1047524396/9754a44845578358f6a403447c458ca4nvdThird Party Advisory
github.com/FFmpeg/FFmpeg/blob/n6.1.1/libavcodec/ppc/vp8dsp_altivec.cnvdProduct
lists.debian.org/debian-lts-announce/2025/02/msg00000.htmlnvd

News mentions

0

No linked articles in our index yet.