CVE-2024-35366

Summary

CVE-2024-35366 is a newly disclosed vulnerability in FFmpeg n6.1.1. The issue lies within the parse_options function of sbgdec.c, located in the libavformat module. This flaw results from insufficient input validation, permitting negative duration values. This oversight can lead to integer overflows, potentially disrupting the normal functioning of FFmpeg and posing a security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.