FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options function of sbgdec.c within the libavformat module. When parsing certain options, the software does not adequately validate the input. This allows for negative duration values to be accepted without proper bounds checking.
The parse_options function in sbgdec.c file does not perform adequate validation of input data when processing SBG format options. Due to lack of bounds checking, it is possible to pass negative duration values, leading to integer overflow (CWE-190). This error can result in unpredictable application behavior, including memory corruption or incorrect file processing logic.
An attacker can compromise the integrity of processed data and cause application crashes (denial of service). The network vector without authentication requirement makes this vulnerability particularly dangerous in environments processing unverified media files.
Patches available from the vendor should be applied according to references — a fix is available in the FFmpeg repository under commit 0bed22d597b78999151e3bde0768b7fe763fc2a6. It is recommended to update to a version containing this patch and avoid processing untrusted SBG files until the patch is deployed.
FFmpeg version n6.1.1 (parse_options function in libavformat/sbgdec.c)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:HFfmpeg
APPFfmpeg6.1.1
Related vulnerabilities
Double Free w FFmpeg — podatność w dekoderze RKMPP (libavcodec)
FFmpeg: Out-of-bounds Read w dekoderze VP8 na architekturze PowerPC (AltiVec)
FFmpeg: nieprawidłowa walidacja indeksu tablicy w dekodowaniu H.266
Integer overflow w FFmpeg — RCE przez parser JPEG XL
Integer overflow w FFmpeg — RCE przez dekoder animacji JPEG XL