tocsin

Debian/ffmpeg: critical 9.8

FFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryption) subsample data to libavformat/mov.c.

Action: Upgrade ffmpeg to 7:5.1.9-0+deb12u1 or later.

Affected

introducedfixedlast affected
07:5.1.9-0+deb12u1-

Fixed versions

7:5.1.9-0+deb12u1

Sources

published · modified · JSON