CVE-2024-36618

Summary

CVE-2024-36618 is a newly identified vulnerability affecting version 6.1.1 of FFmpeg's libavformat library. This issue lies within the AVI demuxer and involves an integer overflow, rendering it susceptible to denial-of-service (DoS) attacks. By manipulating specially crafted AVI files, an attacker could cause the library to consume excessive system resources, leading to a potential crash or service interruption. This vulnerability poses a significant risk to systems that utilize FFmpeg and handle AVI files, necessitating prompt patching to mitigate the threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.