CVE-2024-36616: Ffmpeg

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

An integer overflow in the component /libavformat/westwood_vqa.c of FFmpeg n6.1.1 allows attackers to cause a denial of service in the application via a crafted VQA file.

Affected products

• Ffmpeg Ffmpeg: version 6.1.1 only

Published 2024-11-29. Last modified 2026-06-17.