{"id":"UBUNTU-CVE-2024-31581","details":"FFmpeg version n6.1 was discovered to contain an improper validation of array index vulnerability in libavcodec/cbs_h266_syntax_template.c. This vulnerability allows attackers to cause undefined behavior within the application.","modified":"2025-07-16T08:30:15.004602Z","published":"2024-04-17T19:15:00Z","withdrawn":"2025-07-18T16:57:46Z","upstream":["CVE-2024-31581"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2024-31581"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2024-31581"},{"type":"REPORT","url":"https://github.com/ffmpeg/ffmpeg/commit/ce0c178a408d43e71085c28a47d50dc939b60196"},{"type":"REPORT","url":"https://github.com/FFmpeg/FFmpeg/blob/n6.1.1/libavcodec/cbs_h266_syntax_template.c#L2048"},{"type":"REPORT","url":"https://gist.github.com/1047524396/a7e9273e12553775826784035333cdd8"}],"affected":[{"package":{"name":"ffmpeg","ecosystem":"Ubuntu:25.04","purl":"pkg:deb/ubuntu/ffmpeg@7:7.1.1-1ubuntu1.1?arch=source&distro=plucky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:7.1.1-1ubuntu1.1"}]}],"versions":["7:7.0.2-3ubuntu1","7:7.1-3ubuntu1","7:7.1-3ubuntu2","7:7.1-3ubuntu3","7:7.1-4ubuntu1","7:7.1-4ubuntu2","7:7.1.1-1ubuntu1"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"ffmpeg","binary_version":"7:7.1.1-1ubuntu1.1"},{"binary_name":"ffmpeg-dbgsym","binary_version":"7:7.1.1-1ubuntu1.1"},{"binary_name":"ffmpeg-doc","binary_version":"7:7.1.1-1ubuntu1.1"},{"binary_version":"7:7.1.1-1ubuntu1.1","binary_name":"libavcodec-dev"},{"binary_name":"libavcodec-extra","binary_version":"7:7.1.1-1ubuntu1.1"},{"binary_name":"libavcodec-extra61","binary_version":"7:7.1.1-1ubuntu1.1"},{"binary_name":"libavcodec-extra61-dbgsym","binary_version":"7:7.1.1-1ubuntu1.1"},{"binary_name":"libavcodec61","binary_version":"7:7.1.1-1ubuntu1.1"},{"binary_name":"libavcodec61-dbgsym","binary_version":"7:7.1.1-1ubuntu1.1"},{"binary_name":"libavdevice-dev","binary_version":"7:7.1.1-1ubuntu1.1"},{"binary_name":"libavdevice61","binary_version":"7:7.1.1-1ubuntu1.1"},{"binary_name":"libavdevice61-dbgsym","binary_version":"7:7.1.1-1ubuntu1.1"},{"binary_name":"libavfilter-dev","binary_version":"7:7.1.1-1ubuntu1.1"},{"binary_version":"7:7.1.1-1ubuntu1.1","binary_name":"libavfilter-extra"},{"binary_name":"libavfilter-extra10","binary_version":"7:7.1.1-1ubuntu1.1"},{"binary_name":"libavfilter-extra10-dbgsym","binary_version":"7:7.1.1-1ubuntu1.1"},{"binary_name":"libavfilter10","binary_version":"7:7.1.1-1ubuntu1.1"},{"binary_name":"libavfilter10-dbgsym","binary_version":"7:7.1.1-1ubuntu1.1"},{"binary_name":"libavformat-dev","binary_version":"7:7.1.1-1ubuntu1.1"},{"binary_name":"libavformat-extra","binary_version":"7:7.1.1-1ubuntu1.1"},{"binary_name":"libavformat-extra61","binary_version":"7:7.1.1-1ubuntu1.1"},{"binary_name":"libavformat-extra61-dbgsym","binary_version":"7:7.1.1-1ubuntu1.1"},{"binary_name":"libavformat61","binary_version":"7:7.1.1-1ubuntu1.1"},{"binary_name":"libavformat61-dbgsym","binary_version":"7:7.1.1-1ubuntu1.1"},{"binary_name":"libavutil-dev","binary_version":"7:7.1.1-1ubuntu1.1"},{"binary_name":"libavutil59","binary_version":"7:7.1.1-1ubuntu1.1"},{"binary_name":"libavutil59-dbgsym","binary_version":"7:7.1.1-1ubuntu1.1"},{"binary_name":"libpostproc-dev","binary_version":"7:7.1.1-1ubuntu1.1"},{"binary_name":"libpostproc58","binary_version":"7:7.1.1-1ubuntu1.1"},{"binary_name":"libpostproc58-dbgsym","binary_version":"7:7.1.1-1ubuntu1.1"},{"binary_name":"libswresample-dev","binary_version":"7:7.1.1-1ubuntu1.1"},{"binary_name":"libswresample5","binary_version":"7:7.1.1-1ubuntu1.1"},{"binary_version":"7:7.1.1-1ubuntu1.1","binary_name":"libswresample5-dbgsym"},{"binary_name":"libswscale-dev","binary_version":"7:7.1.1-1ubuntu1.1"},{"binary_version":"7:7.1.1-1ubuntu1.1","binary_name":"libswscale8"},{"binary_version":"7:7.1.1-1ubuntu1.1","binary_name":"libswscale8-dbgsym"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-31581.json"}}],"schema_version":"1.7.3","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}]}