tocsin

Debian/ffmpeg: critical 9.8

Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the jpegxl_anim_read_packet component in the JPEG XL Animation decoder.

Action: Upgrade ffmpeg to 7:6.1-1 or later.

Affected

introducedfixedlast affected
07:6.1-1-

Fixed versions

7:6.1-1

Sources

published · modified · JSON