CVE-2024-36613

{"id": "CVE-2024-36613", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.2, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.5}]}, "published": "2025-01-03T18:15:15.343", "references": [{"url": "https://gist.github.com/1047524396/0f4d90ef87553f772f888223085ac806", "tags": ["Third Party Advisory"], "source": "[email protected]"}, {"url": "https://github.com/FFmpeg/FFmpeg/blob/n6.1.1/libavformat/dxa.c#L125", "tags": ["Product"], "source": "[email protected]"}, {"url": "https://github.com/ffmpeg/ffmpeg/commit/50d8e4f27398fd5778485a827d7a2817921f8540", "tags": ["Patch"], "source": "[email protected]"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-190"}]}], "descriptions": [{"lang": "en", "value": "FFmpeg n6.1.1 has a vulnerability in the DXA demuxer of the libavformat library allowing for an integer overflow, potentially resulting in a denial-of-service (DoS) condition or other undefined behavior."}, {"lang": "es", "value": "FFmpeg n6.1.1 tiene una vulnerabilidad en el demuxer DXA de la librer\u00eda libavformat que permite un desbordamiento de enteros, lo que potencialmente puede resultar en una condici\u00f3n de denegaci\u00f3n de servicio (DoS) u otro comportamiento indefinido."}], "lastModified": "2025-06-03T16:02:11.443", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ffmpeg:ffmpeg:6.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "53C87DB5-4F23-45F8-A2F1-BD69CEAC54E2"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}