CVE Daily

CVE-2024-22862

Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to...

Critical CVSS 9.8

Overview

Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the JJPEG XL Parser.

CWE: CWE-190 Published: 2024-01-27T06:15:48.477
Risk analysis

This vulnerability is rated 🔴 CRITICAL.

  • CVSS: 9.8 (CRITICAL)
  • Detected tags: int_overflow, rce (tag impact: VERY HIGH)

Recommended actions:

  • Patch/upgrade immediately (remote code execution).
  • Reduce exposure (WAF/segmentation), minimize attack surface.

Recommended tools

Tags