CVE-2024-35365

ADVISORY - nist

Summary

FFmpeg version n6.1.1 has a double-free vulnerability in the fftools/ffmpeg_mux_init.c component of FFmpeg, specifically within the new_stream_audio function.

EPSS Score⁠: 0.00668 (0.475)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-415⁠

Double Free

ADVISORY - redhat

CWE-415⁠

Double Free

Impacted images

Advisories

NIST

CREATED

2 years ago

UPDATED

1 year ago

ADVISORY IDCVE-2024-35365⁠

EXPLOITABILITY SCORE

2.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-415⁠

CVSS SCORE

8.8high

Debian

CREATED

2 years ago

UPDATED

2 months ago

ADVISORY IDCVE-2024-35365⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

Ubuntu

CREATED

2 years ago

UPDATED

5 months ago

ADVISORY IDCVE-2024-35365⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Red Hat

CREATED

2 years ago

UPDATED

1 year ago

ADVISORY IDCVE-2024-35365⁠

EXPLOITABILITY SCORE

1.2

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-415⁠

CVSS SCORE

4.6medium