CVE-2024-7272

Name	CVE-2024-7272
Description	A vulnerability, which was classified as critical, was found in FFmpeg up to 5.1.5. This affects the function fill_audiodata of the file /libswresample/swresample.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. This issue was fixed in version 6.0 by 9903ba28c28ab18dc7b7b6fb8571cc8b5caae1a6 but a backport for 5.1 was forgotten. The exploit has been disclosed to the public and may be used. Upgrading to version 5.1.6 and 6.0 9903ba28c28ab18dc7b7b6fb8571cc8b5caae1a6 is able to address this issue. It is recommended to upgrade the affected component.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DSA-5748-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
ffmpeg (PTS)	bullseye (security), bullseye	7:4.3.7-0+deb11u1	fixed
	bookworm, bookworm (security)	7:5.1.6-0+deb12u1	fixed
	sid, trixie	7:7.0.2-3	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin
ffmpeg	source	bullseye	(not affected)
ffmpeg	source	bookworm	7:5.1.6-0+deb12u1	DSA-5748-1
ffmpeg	source	(unstable)	7:6.0-4

Notes

[bullseye] - ffmpeg <not-affected> (Vulnerable code introduced later)
https://trac.ffmpeg.org/ticket/9908
https://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=9903ba28c28ab18dc7b7b6fb8571cc8b5caae1a6 (n6.0)
https://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=a937b3c58babae893fb46b286a4792cd24a01d3d (n5.1.6)