CVE-2024-7272

Summary

CVE-2024-7272 is a critical vulnerability affecting FFmpeg versions up to 5.1.5. The issue lies in the function fill_audiodata of the file /libswresample/swresample.c, leading to a heap-based buffer overflow. This flaw can be exploited remotely, making it a significant threat. The vulnerability was addressed in version 6.0 (9903ba28c28ab18dc7b7b6fb8571cc8b5caae1a6), but a backport for 5.1 was overlooked. The exploit has been disclosed publicly, raising concerns for unpatched systems. To mitigate this risk, it's strongly advised to upgrade to FFmpeg version 5.1.6 or 6.0 (9903ba28c28ab18dc7b7b6fb8571cc8b5caae1a6).

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.