CVE-2024-55069 — NULL Pointer Dereference in Ffmpeg

CWE-476 — NULL Pointer Dereference5 documents5 sources
Severity
5.3MEDIUMNVD
EPSS
0.3%
top 46.94%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
FfmpegDebian Ffmpeg
Timeline
PublishedMay 2
Latest updateMay 3

Description

ffmpeg 7.1 is vulnerable to Null Pointer Dereference in function iamf_read_header in /libavformat/iamfdec.c.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages3 packages

▶debiandebian/ffmpeg< ffmpeg 7:7.1.1-1 (forky)
▶Debianffmpeg/ffmpeg< 7:7.1.1-1+1
▶NVDffmpeg/ffmpeg7.1

Patches

Patch: git.ffmpeg.org ↗

🔴Vulnerability Details

3
GHSA
GHSA-v2gm-5jqw-x4qc: ffmpeg 7↗2025-05-03
▶
OSV
CVE-2024-55069: ffmpeg 7↗2025-05-02
▶
CVEList
CVE-2024-55069: ffmpeg 7↗2025-05-02
▶

📋Vendor Advisories

1
Debian
CVE-2024-55069: ffmpeg - ffmpeg 7.1 is vulnerable to Null Pointer Dereference in function iamf_read_heade...↗2024
▶