CVE-2024-35365

FFmpeg version n6.1.1 has a double-free vulnerability in the fftools/ffmpeg_mux_init.c component of FFmpeg, specifically within the new_stream_audio f...

Original description

The description as published by the source.

FFmpeg version n6.1.1 has a double-free vulnerability in the fftools/ffmpeg_mux_init.c component of FFmpeg, specifically within the new_stream_audio function.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2024-35365 ffmpeg Fixed in: 7:7.0.1-3
Ubuntu UBUNTU-CVE-2024-35365 libav

References

advisory github.com
advisory nvd.nist.gov
patch github.com
web gist.github.com
web github.com