{"id":"CVE-2024-7055","aliases":["DEBIAN-CVE-2024-7055","DLA-3928-1","DSA-5748-1","EUVD-2024-48054","GHSA-5gxm-744m-qfgp","JLSEC-2025-133","MGASA-2024-0283","OESA-2024-2075","ROOT-OS-UBUNTU-2204-CVE-2024-7055","SUSE-SU-2024:3301-1","SUSE-SU-2024:3358-1","SUSE-SU-2025:0862-1","UBUNTU-CVE-2024-7055","USN-7823-1","openSUSE-SU-2024:14339-1","openSUSE-SU-2024:14343-1","openSUSE-SU-2024:14344-1","openSUSE-SU-2024:14384-1"],"status":"published","title":"FFmpeg pnmdec.c pnm_decode_frame heap-based overflow","description":"A vulnerability was found in FFmpeg up to 7.0.1. It has been classified as critical. This affects the function pnm_decode_frame in the library /libavcodec/pnmdec.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 7.0.2 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-273651.","severity":{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01436,"percentile":0.73316,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-122","CWE-787"],"published":"2024-08-06T06:00:10Z","modified":"2026-11-02T12:03:12Z","fixes":[{"ecosystem":"Debian:12","package":"ffmpeg","fixed_in":["7:5.1.6-0+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"ffmpeg","fixed_in":["7:7.0.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"ffmpeg","fixed_in":["7:7.0.2-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"FFMPEG_jll","fixed_in":["6.1.2+0"],"sources":["osv"]},{"ecosystem":"Julia","package":"FFplay_jll","fixed_in":["7.1.0+0"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"ffmpeg","fixed_in":["6.1.1-13.oe2403"],"sources":["osv"]},{"ecosystem":"Root:Ubuntu:22.04","package":"ffmpeg","fixed_in":["7:4.4.2-0ubuntu0.22.04.1.root.io.1","7:4.4.2-0ubuntu0.22.04.1.root.io.2","7:4.4.2-0ubuntu0.22.04.1.aikido.4","7:4.4.2-0ubuntu0.22.04.1.aikido.3"],"sources":["osv"]},{"ecosystem":"Root:Ubuntu:22.04","package":"rootio-ffmpeg","fixed_in":["7:4.4.2-0ubuntu0.22.04.1.root.io.1","7:4.4.2-0ubuntu0.22.04.1.root.io.2","7:4.4.2-0ubuntu0.22.04.1.aikido.4","7:4.4.2-0ubuntu0.22.04.1.aikido.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"ffmpeg-4","fixed_in":["4.4-150600.13.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP6","package":"ffmpeg-4","fixed_in":["4.4-150600.13.13.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"ffmpeg-4","fixed_in":["4.4-150600.13.13.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"ffmpeg","fixed_in":["7:4.4.2-0ubuntu0.22.04.1+esm9"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:24.04:LTS","package":"ffmpeg","fixed_in":["7:6.1.1-3ubuntu5+esm5"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"ffmpeg-5","fixed_in":["5.1.4-13.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"ffmpeg-4","fixed_in":["4.4.4-14.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"ffmpeg-6","fixed_in":["6.1.1-9.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"ffmpeg-7","fixed_in":["7.1-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.1.6-0+deb12u1"}]}],"versions":["7:5.1.3-1","7:5.1.3-2","7:5.1.4-0+deb12u1","7:5.1.5-0+deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:7.0.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:7.0.2-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.3.8-0+deb11u1"}]}],"versions":["7:4.3.2-0+deb11u2","7:4.3.2-1","7:4.3.2-2","7:4.3.3-0+deb11u1","7:4.3.4-0+deb11u1","7:4.3.5-0+deb11u1","7:4.3.6-0+deb11u1","7:4.3.7-0+deb11u1"],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.1.6-0+deb12u1"}]}],"versions":["7:5.1.3-1","7:5.1.3-2","7:5.1.4-0+deb12u1","7:5.1.5-0+deb12u1"],"bundled":2},{"source":"osv","ecosystem":"Julia","package":"FFMPEG_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"6.1.2+0"}]}]},{"source":"osv","ecosystem":"Julia","package":"FFplay_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"7.1.0+0"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.6-1.mga9"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:9","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.6-1.mga9.tainted"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.1-13.oe2403"}]}]},{"source":"osv","ecosystem":"Root:Ubuntu:22.04","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4.2-0ubuntu0.22.04.1.root.io.1"},{"fixed":"7:4.4.2-0ubuntu0.22.04.1.root.io.2"},{"fixed":"7:4.4.2-0ubuntu0.22.04.1.aikido.4"},{"fixed":"7:4.4.2-0ubuntu0.22.04.1.aikido.3"}]}]},{"source":"osv","ecosystem":"Root:Ubuntu:22.04","package":"rootio-ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4.2-0ubuntu0.22.04.1.root.io.1"},{"fixed":"7:4.4.2-0ubuntu0.22.04.1.root.io.2"},{"fixed":"7:4.4.2-0ubuntu0.22.04.1.aikido.4"},{"fixed":"7:4.4.2-0ubuntu0.22.04.1.aikido.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"ffmpeg-4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4-150600.13.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP6","package":"ffmpeg-4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4-150600.13.13.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"ffmpeg-4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4-150600.13.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"ffmpeg-4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4-150400.3.42.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"ffmpeg-4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4-150400.3.42.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"ffmpeg-4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4-150400.3.42.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"ffmpeg-4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4-150400.3.42.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"ffmpeg-4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4-150400.3.42.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP5","package":"ffmpeg-4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4-150400.3.42.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"ffmpeg-4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4-150400.3.42.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"ffmpeg-4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.5-150600.13.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP6","package":"ffmpeg-4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.5-150600.13.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"ffmpeg-4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.5-150600.13.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6:0.8.7-1ubuntu2","6:9.10-1ubuntu1","6:9.10-1ubuntu2","6:9.10-1ubuntu5","6:9.10-1ubuntu6","6:9.10-1ubuntu7","6:9.11-2ubuntu1","6:9.11-2ubuntu2","6:9.13-0ubuntu0.14.04.1","6:9.14-0ubuntu0.14.04.1","6:9.16-0ubuntu0.14.04.1","6:9.18-0ubuntu0.14.04.1","6:9.20-0ubuntu0.14.04.1","6:9.20-0ubuntu0.14.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4.2-0ubuntu0.22.04.1+esm9"}]}],"versions":["7:4.4-6ubuntu5","7:4.4.1-2ubuntu1","7:4.4.1-3ubuntu1","7:4.4.1-3ubuntu2","7:4.4.1-3ubuntu3","7:4.4.1-3ubuntu5","7:4.4.2-0ubuntu0.22.04.1","7:4.4.2-0ubuntu0.22.04.1+esm1","7:4.4.2-0ubuntu0.22.04.1+esm2","7:4.4.2-0ubuntu0.22.04.1+esm3","7:4.4.2-0ubuntu0.22.04.1+esm4","7:4.4.2-0ubuntu0.22.04.1+esm5","7:4.4.2-0ubuntu0.22.04.1+esm6","7:4.4.2-0ubuntu0.22.04.1+esm7","7:4.4.2-0ubuntu0.22.04.1+esm8"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:6.1.1-3ubuntu5+esm5"}]}],"versions":["7:6.0-6ubuntu1","7:6.0-9ubuntu1","7:6.1-2ubuntu1","7:6.1-3ubuntu1","7:6.1-4ubuntu1","7:6.1-5ubuntu1","7:6.1.1-1ubuntu1","7:6.1.1-3ubuntu1","7:6.1.1-3ubuntu5","7:6.1.1-3ubuntu5+esm1","7:6.1.1-3ubuntu5+esm2","7:6.1.1-3ubuntu5+esm3","7:6.1.1-3ubuntu5+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:2.8.17-0ubuntu0.1+esm12"}]}],"versions":["7:2.7.2-1build1","7:2.8.1-1ubuntu1","7:2.8.2-1ubuntu1","7:2.8.3-1","7:2.8.4-1","7:2.8.4-1ubuntu1","7:2.8.4-1ubuntu2","7:2.8.4-1ubuntu3","7:2.8.4-1ubuntu4","7:2.8.6-1ubuntu1","7:2.8.6-1ubuntu2","7:2.8.8-0ubuntu0.16.04.1","7:2.8.10-0ubuntu0.16.04.1","7:2.8.11-0ubuntu0.16.04.1","7:2.8.14-0ubuntu0.16.04.1","7:2.8.15-0ubuntu0.16.04.1","7:2.8.15-0ubuntu0.16.04.1+esm1","7:2.8.17-0ubuntu0.1","7:2.8.17-0ubuntu0.1+esm1","7:2.8.17-0ubuntu0.1+esm2","7:2.8.17-0ubuntu0.1+esm3","7:2.8.17-0ubuntu0.1+esm4","7:2.8.17-0ubuntu0.1+esm5","7:2.8.17-0ubuntu0.1+esm6","7:2.8.17-0ubuntu0.1+esm7","7:2.8.17-0ubuntu0.1+esm8","7:2.8.17-0ubuntu0.1+esm9","7:2.8.17-0ubuntu0.1+esm10","7:2.8.17-0ubuntu0.1+esm11"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.4.11-0ubuntu0.1+esm10"}]}],"versions":["7:3.3.4-2","7:3.3.4-2build3","7:3.4-2ubuntu2","7:3.4-4","7:3.4-4build1","7:3.4.1-1","7:3.4.1-1build1","7:3.4.2-1","7:3.4.2-1build1","7:3.4.2-2","7:3.4.4-0ubuntu0.18.04.1","7:3.4.6-0ubuntu0.18.04.1","7:3.4.8-0ubuntu0.2","7:3.4.11-0ubuntu0.1","7:3.4.11-0ubuntu0.1+esm1","7:3.4.11-0ubuntu0.1+esm2","7:3.4.11-0ubuntu0.1+esm3","7:3.4.11-0ubuntu0.1+esm4","7:3.4.11-0ubuntu0.1+esm5","7:3.4.11-0ubuntu0.1+esm6","7:3.4.11-0ubuntu0.1+esm7","7:3.4.11-0ubuntu0.1+esm8","7:3.4.11-0ubuntu0.1+esm9"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.2.7-0ubuntu0.1+esm10"}]}],"versions":["7:4.1.4-1build2","7:4.2.1-2","7:4.2.1-2ubuntu1","7:4.2.2-1build1","7:4.2.2-1ubuntu1","7:4.2.4-1ubuntu0.1","7:4.2.4-1ubuntu0.1+esm1","7:4.2.7-0ubuntu0.1","7:4.2.7-0ubuntu0.1+esm1","7:4.2.7-0ubuntu0.1+esm2","7:4.2.7-0ubuntu0.1+esm3","7:4.2.7-0ubuntu0.1+esm4","7:4.2.7-0ubuntu0.1+esm5","7:4.2.7-0ubuntu0.1+esm6","7:4.2.7-0ubuntu0.1+esm7","7:4.2.7-0ubuntu0.1+esm8","7:4.2.7-0ubuntu0.1+esm9"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4.2-0ubuntu0.22.04.1+esm9"}]}],"versions":["7:4.4-6ubuntu5","7:4.4.1-2ubuntu1","7:4.4.1-3ubuntu1","7:4.4.1-3ubuntu2","7:4.4.1-3ubuntu3","7:4.4.1-3ubuntu5","7:4.4.2-0ubuntu0.22.04.1","7:4.4.2-0ubuntu0.22.04.1+esm1","7:4.4.2-0ubuntu0.22.04.1+esm2","7:4.4.2-0ubuntu0.22.04.1+esm3","7:4.4.2-0ubuntu0.22.04.1+esm4","7:4.4.2-0ubuntu0.22.04.1+esm5","7:4.4.2-0ubuntu0.22.04.1+esm6","7:4.4.2-0ubuntu0.22.04.1+esm7","7:4.4.2-0ubuntu0.22.04.1+esm8"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:6.1.1-3ubuntu5+esm5"}]}],"versions":["7:6.0-6ubuntu1","7:6.0-9ubuntu1","7:6.1-2ubuntu1","7:6.1-3ubuntu1","7:6.1-4ubuntu1","7:6.1-5ubuntu1","7:6.1.1-1ubuntu1","7:6.1.1-3ubuntu1","7:6.1.1-3ubuntu5","7:6.1.1-3ubuntu5+esm1","7:6.1.1-3ubuntu5+esm2","7:6.1.1-3ubuntu5+esm3","7:6.1.1-3ubuntu5+esm4"],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ffmpeg-5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.4-13.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ffmpeg-4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.4-14.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ffmpeg-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.1-9.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ffmpeg-7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1-1.1"}]}]}],"products":[{"vendor":"ffmpeg","product":"ffmpeg"}],"references":[{"url":"https://vuldb.com/?id.273651","tags":["vdb-entry","technical-description","Third Party Advisory","VDB Entry","advisory","web","report"]},{"url":"https://vuldb.com/?ctiid.273651","tags":["signature","permissions-required","Permissions Required","VDB Entry","report","web"]},{"url":"https://vuldb.com/?submit.376532","tags":["third-party-advisory","Third Party Advisory","VDB Entry","advisory","web","report"]},{"url":"https://github.com/CookedMelon/ReportCVE/tree/main/FFmpeg/poc3","tags":["exploit","Third Party Advisory","evidence","web","report"]},{"url":"https://ffmpeg.org/download.html","tags":["patch","Product","fix","web","report"]},{"url":"https://ffmpeg.org/","tags":["product","Product","web","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/10/msg00019.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-7055","tags":["advisory"]},{"url":"https://ffmpeg.org"},{"url":"https://github.com/advisories/GHSA-5gxm-744m-qfgp"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/7xxx/CVE-2024-7055.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-7055","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0283.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33524","tags":["report"]},{"url":"https://lwn.net/Articles/985600/","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2075","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243301-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1229026","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7055","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243358-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1226892","tags":["report"]},{"url":"https://bugzilla.suse.com/1226897","tags":["report"]},{"url":"https://bugzilla.suse.com/1226898","tags":["report"]},{"url":"https://bugzilla.suse.com/1226899","tags":["report"]},{"url":"https://bugzilla.suse.com/1226900","tags":["report"]},{"url":"https://bugzilla.suse.com/1226901","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-22656","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-45221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-47169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-47282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-48368","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250862-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1202848","tags":["report"]},{"url":"https://bugzilla.suse.com/1215945","tags":["report"]},{"url":"https://bugzilla.suse.com/1223070","tags":["report"]},{"url":"https://bugzilla.suse.com/1223235","tags":["report"]},{"url":"https://bugzilla.suse.com/1223256","tags":["report"]},{"url":"https://bugzilla.suse.com/1223272","tags":["report"]},{"url":"https://bugzilla.suse.com/1223304","tags":["report"]},{"url":"https://bugzilla.suse.com/1223437","tags":["report"]},{"url":"https://bugzilla.suse.com/1227296","tags":["report"]},{"url":"https://bugzilla.suse.com/1229338","tags":["report"]},{"url":"https://bugzilla.suse.com/1234028","tags":["report"]},{"url":"https://bugzilla.suse.com/1235092","tags":["report"]},{"url":"https://bugzilla.suse.com/1236007","tags":["report"]},{"url":"https://bugzilla.suse.com/1237351","tags":["report"]},{"url":"https://bugzilla.suse.com/1237358","tags":["report"]},{"url":"https://bugzilla.suse.com/1237371","tags":["report"]},{"url":"https://bugzilla.suse.com/1237382","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-49502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-50010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-51793","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-51794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-51798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-12361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-31578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-32230","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-35368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-36613","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22919","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22921","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-25473","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2024-7055","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-7055","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7823-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-35365","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-35366","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-35367","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-35368","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36613","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36616","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36618","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36619","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RIDSFTM256P7QTXFMC5QSC6VIJKSS3TQ/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EUS3XOB45IICEJXVEPZ3N7N2LWQEGTJ2/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BGHBNX4J5LWQPGGAY4MMCALQMW465IX6/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RB44IOXPMKDZE3AOZD7CSIRL7ACFB2AV/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-7055","title":"FFmpeg pnmdec.c pnm_decode_frame heap-based overflow","description":"A vulnerability was found in FFmpeg up to 7.0.1. It has been classified as critical. This affects the function pnm_decode_frame in the library /libavcodec/pnmdec.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 7.0.2 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-273651.","status":"published","published":"2024-08-06T06:00:10.659Z","modified":"2025-11-03T22:32:48.492Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","level":"medium","assessor":"cna"},{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna"},{"version":"3.0","score":6.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","assessor":"cna"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:34:20.673123Z"}],"euvd":[{"id":"EUVD-2024-48054","description":"A vulnerability was found in FFmpeg up to 7.0.1. It has been classified as critical. This affects the function pnm_decode_frame in the library /libavcodec/pnmdec.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 7.0.2 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-273651.","status":"published","published":"2024-08-06T06:00:10Z","modified":"2025-11-03T22:32:48Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-02T19:49:29.890052Z"}],"ghsa":[{"id":"GHSA-5gxm-744m-qfgp","title":"A vulnerability was found in FFmpeg up to 7.0.1. It has been classified as critical. This affects...","description":"A vulnerability was found in FFmpeg up to 7.0.1. It has been classified as critical. This affects the function pnm_decode_frame in the library /libavcodec/pnmdec.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 7.0.2 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-273651.","status":"published","published":"2024-08-06T06:30:38Z","modified":"2025-11-04T00:31:10Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"},{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-122","CWE-787"],"updated_at":"2026-11-02T15:04:27.294317Z"}],"nvd":[{"id":"CVE-2024-7055","description":"A vulnerability was found in FFmpeg up to 7.0.1. It has been classified as critical. This affects the function pnm_decode_frame in the library /libavcodec/pnmdec.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 7.0.2 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-273651.","status":"published","published":"2024-08-06T06:15:36.107Z","modified":"2026-06-17T08:19:16.523Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"secondary"}],"cwes":["CWE-122","CWE-787"],"updated_at":"2026-11-02T14:10:17.832118Z"}],"osv":[{"id":"CVE-2024-7055","title":"FFmpeg pnmdec.c pnm_decode_frame heap-based overflow","description":"A vulnerability was found in FFmpeg up to 7.0.1. It has been classified as critical. This affects the function pnm_decode_frame in the library /libavcodec/pnmdec.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 7.0.2 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-273651.","status":"published","published":"2024-08-06T06:00:10.659Z","modified":"2026-11-07T10:47:30.290541335Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"cwes":["CWE-122"],"updated_at":"2026-11-07T11:15:38.581573Z"},{"id":"DEBIAN-CVE-2024-7055","description":"A vulnerability was found in FFmpeg up to 7.0.1. It has been classified as critical. This affects the function pnm_decode_frame in the library /libavcodec/pnmdec.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 7.0.2 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-273651.","status":"published","published":"2024-08-06T06:15:36.107Z","modified":"2026-11-02T12:03:12.146500197Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:44.747956Z"},{"id":"JLSEC-2025-133","title":"A vulnerability was found in FFmpeg up to 7.0.1","description":"A vulnerability was found in FFmpeg up to 7.0.1. It has been classified as critical. This affects the function `pnm_decode_frame` in the library `/libavcodec/pnmdec.c`. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 7.0.2 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-273651.","status":"published","published":"2025-10-19T19:08:53.76Z","modified":"2026-07-23T22:30:09.036084251Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"}],"updated_at":"2026-11-02T15:47:17.805107Z"},{"id":"OESA-2024-2075","title":"ffmpeg security update","description":"FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash.\r\n\r\nSecurity Fix(es):\r\n\r\nA vulnerability was found in FFmpeg up to 7.0.1. It has been classified as critical. This affects the function pnm_decode_frame in the library /libavcodec/pnmdec.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 7.0.2 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-273651.(CVE-2024-7055)","status":"published","published":"2024-08-30T11:07:32Z","modified":"2026-08-18T01:18:35.808672831Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:41.595342Z"},{"id":"UBUNTU-CVE-2024-7055","description":"A vulnerability was found in FFmpeg up to 7.0.1. It has been classified as critical. This affects the function pnm_decode_frame in the library /libavcodec/pnmdec.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 7.0.2 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-273651.","status":"published","published":"2024-08-06T06:15:00Z","modified":"2026-04-22T15:28:07.411298Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-02T16:55:18.664792Z"},{"id":"DLA-3928-1","title":"ffmpeg - security update","status":"published","published":"2024-10-21T00:00:00Z","modified":"2026-03-09T02:11:32.376491Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DSA-5748-1","title":"ffmpeg - security update","status":"published","published":"2024-08-14T00:00:00Z","modified":"2026-03-09T02:08:31.769966Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"MGASA-2024-0283","title":"Updated ffmpeg packages fix security vulnerabilities","description":"A vulnerability was found in FFmpeg up to 7.0.1. It has been classified\nas critical. This affects the function pnm_decode_frame in the library\n/libavcodec/pnmdec.c. The manipulation leads to heap-based buffer\noverflow. It is possible to initiate the attack remotely. The exploit\nhas been disclosed to the public and may be used. (CVE-2024-7055)\nA vulnerability, which was classified as critical, was found in FFmpeg\nup to 5.1.5. This affects the function fill_audiodata of the file\n/libswresample/swresample.c. The manipulation leads to heap-based buffer\noverflow. It is possible to initiate the attack remotely.\n(CVE-2024-7272)\n","status":"published","published":"2024-09-09T19:00:01Z","modified":"2026-04-16T04:41:32.387031397Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:14339-1","title":"ffmpeg-5-5.1.4-13.1 on GA media","description":"These are all security issues fixed in the ffmpeg-5-5.1.4-13.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-09-17T00:00:00Z","modified":"2026-02-04T04:13:45.462433Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"openSUSE-SU-2024:14343-1","title":"ffmpeg-4-4.4.4-14.1 on GA media","description":"These are all security issues fixed in the ffmpeg-4-4.4.4-14.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-09-18T00:00:00Z","modified":"2026-02-04T02:39:32.00655Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"openSUSE-SU-2024:14344-1","title":"ffmpeg-6-6.1.1-9.1 on GA media","description":"These are all security issues fixed in the ffmpeg-6-6.1.1-9.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-09-18T00:00:00Z","modified":"2026-02-04T02:33:41.473881Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"openSUSE-SU-2024:14384-1","title":"ffmpeg-7-7.1-1.1 on GA media","description":"These are all security issues fixed in the ffmpeg-7-7.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-10-04T00:00:00Z","modified":"2026-02-04T02:48:52.977249Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"ROOT-OS-UBUNTU-2204-CVE-2024-7055","title":"CVE-2024-7055 in ffmpeg - Patched by Root","description":"Root has patched CVE-2024-7055 in the ffmpeg package for Root:Ubuntu:22.04. Multiple fixed versions available.","status":"published","published":"2026-08-11T17:16:57Z","modified":"2026-08-11T20:40:36.854272598Z","updated_at":"2026-11-02T15:53:34.472933Z"},{"id":"SUSE-SU-2024:3301-1","title":"Security update for ffmpeg-4","description":"This update for ffmpeg-4 fixes the following issues:\n\n- CVE-2024-7055: Fixed a heap-based buffer overflow in pnmdec. (bsc#1229026)\n","status":"published","published":"2024-09-18T12:51:40Z","modified":"2026-02-04T04:18:39.755309Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"SUSE-SU-2024:3358-1","title":"Security update for ffmpeg-4","description":"This update for ffmpeg-4 fixes the following issues:\n\n- Dropped support for libmfx to fix the following CVEs:\n  * libmfx: improper input validation (CVE-2023-48368, bsc#1226897)\n  * libmfx: improper buffer restrictions (CVE-2023-45221, bsc#1226898)\n  * libmfx: out-of-bounds read (CVE-2023-22656, bsc#1226899)\n  * libmfx: out-of-bounds write (CVE-2023-47282, bsc#1226900)\n  * libmfx: improper buffer restrictions (CVE-2023-47169, bsc#1226901)\n- CVE-2024-7055: heap-based buffer overflow in pnmdec.c from the libavcodec library. (bsc#1229026)\n","status":"published","published":"2024-09-20T15:16:35Z","modified":"2026-02-04T03:32:33.670623Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"SUSE-SU-2025:0862-1","title":"Security update for ffmpeg-4","description":"This update for ffmpeg-4 fixes the following issues:\n  \n- CVE-2025-22921: Fixed segmentation violation in NULL pointer dereference via the component /libavcodec/jpeg2000dec.c (bsc#1237382).\n- CVE-2025-25473: Fixed memory leak in avformat_free_context() (bsc#1237351).\n- CVE-2025-0518: Fixed unchecked sscanf return value which leads to memory data leak (bsc#1236007).\n- CVE-2025-22919: Fixed denial of service (DoS) via opening a crafted AAC file (bsc#1237371).\n- CVE-2024-12361: Fixed NULL Pointer Dereference (bsc#1237358).\n- CVE-2024-35368: Fixed Double Free via the rkmpp_retrieve_frame function within libavcodec/rkmppdec.c (bsc#1234028).\n- CVE-2024-36613: Fixed Integer overflow in ffmpeg (bsc#1235092).\n- CVE-2023-50010: Fixed arbitrary code execution via the set_encoder_id function in /fftools/ffmpeg_enc.c component (bsc#1223256).\n- CVE-2023-51794: Fixed heap-buffer-overflow at libavfilter/af_stereowiden.c (bsc#1223437).\n- CVE-2023-51793: Fixed heap buffer overflow in the image_copy_plane function in libavutil/imgutils.c (bsc#1223272).\n- CVE-2023-49502: Fixed heap buffer overflow via the ff_bwdif_filter_intra_c function in libavfilter/bwdifdsp.c (bsc#1223235).\n- CVE-2023-51798: Fixed floating point exception(FPE) via the interpolate function in libavfilter/vf_minterpolate.c (bsc#1223304).\n- CVE-2024-31578: Fixed heap use-after-free via the av_hwframe_ctx_init function (bsc#1223070).\n- CVE-2024-7055: Fixed heap-based buffer overflow in pnmdec.c (bsc#1229026).\n- CVE-2024-32230: Fixed buffer overflow due to negative-size-param bug at libavcodec/mpegvideo_enc.c in load_input_picture (bsc#1227296).\n\nOther fixes:\n- Updated to version 4.4.5.\n  ","status":"published","published":"2025-03-14T08:45:30Z","modified":"2026-02-04T02:54:29.454882Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"USN-7823-1","title":"ffmpeg vulnerabilities","description":"It was discovered that FFmpeg did not correctly handle certain memory\noperations. An attacker could possibly use this issue to cause a denial\nof service or execute arbitrary code. This issue only affected\nUbuntu 24.04 LTS. (CVE-2024-35365)\n\nIt was discovered that FFmpeg did not correctly handle certain integer\ncalculations. An attacker could possibly use this issue to cause a denial\nof service. (CVE-2024-35366)\n\nIt was discovered that FFmpeg may perform an out-of-bounds read under\ncertain circumstances. An attacker could possibly use this issue to cause\na denial of service. (CVE-2024-35367)\n\nIt was discovered that FFmpeg did not correctly handle certain memory\noperations. An attacker could possibly use this issue to cause a denial\nof service or execute arbitrary code. This issue only affected\nUbuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 24.04 LTS.\n(CVE-2024-35368)\n\nIt was discovered that FFmpeg did not correctly handle certain inputs,\nwhich could lead to an integer overflow. An attacker could possibly use\nthis issue to cause a denial of service or execute arbitrary code.\n(CVE-2024-36613, CVE-2024-36616, CVE-2024-36618)\n\nIt was discovered that FFmpeg did not correctly handle certain inputs,\nwhich could lead to an integer overflow. An attacker could possibly use\nthis issue to cause a denial of service or execute arbitrary code. This\nissue only affected Ubuntu 24.04 LTS. (CVE-2024-36619)\n\nIt was discovered that FFmpeg did not correctly handle certain memory\noperations. A remote attacker could possibly use this issue to cause a\ndenial of service or execute arbitrary code. This issue only affected\nUbuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2024-7055)","status":"published","published":"2025-10-15T02:45:16Z","modified":"2026-06-25T13:32:31.308636632Z","updated_at":"2026-11-02T16:58:21.91885Z"}]}}