CVE-2024-22860: Ffmpeg

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the jpegxl_anim_read_packet component in the JPEG XL Animation decoder.

Affected products

• Ffmpeg Ffmpeg: version 6.1 only

Published 2024-01-27. Last modified 2026-06-17.