tocsin

Debian/ffmpeg: unknown

A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attacker to potentially gain remote code execution or cause denial of service via the channel definition cdef atom of JPEG2000

Action: Upgrade ffmpeg to 7:5.1.7-0+deb12u1 or later.

Affected

introducedfixedlast affected
07:5.1.7-0+deb12u1-

Fixed versions

7:5.1.7-0+deb12u1

Sources

published · modified · JSON