Submit #376451: GitHub FFmpeg N-111029-g402d98c9d4 Use After Freeinfo

TitleGitHub FFmpeg N-111029-g402d98c9d4 Use After Free
DescriptionSEGV in FFmpeg N-111029-g402d98c9d4 allows a local attacker to execute arbitrary code, and cause a denial of service via the jpegxl_collect_codestream_header function in FFmpeg/libavformat/jpegxl_anim_dec.c:63
Source⚠️ https://github.com/CookedMelon/ReportCVE/tree/main/FFmpeg/poc2
User
 CookedMelon (UID 52513)
Submission07/17/2024 16:00 (2 years ago)
Moderation08/03/2024 08:42 (17 days later)
StatusAccepted
VulDB entry273539 [FFmpeg 402d98c9d467dff6931d906ebb732b9a00334e0b jpegxl_anim_dec.c jpegxl_collect_codestream_header use after free]
Points17

Do you know our Splunk app?

Download it now for free!