CVE-2024-31582: Fedoraproject Fedora

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

FFmpeg version n6.1 was discovered to contain a heap buffer overflow vulnerability in the draw_block_rectangle function of libavfilter/vf_codecview.c. This vulnerability allows attackers to cause undefined behavior or a Denial of Service (DoS) via crafted input.

Affected products

• Fedoraproject Fedora: version 38 only; version 39 only; version 40 only
• Ffmpeg Ffmpeg: from 6.1, before 7.0 (fixed in 7.0)

Published 2024-04-17. Last modified 2026-06-17.