CVE-2024-31585: fedoraproject fedora Off-by-one Error
CVSS: 5.3v3.1MediumModified
AliasesDEBIAN-CVE-2024-31585CGA-5c5c-5rwg-78j8CGA-wwrm-84ph-24jp
Published 17-04-2024Last modified 09-06-2025
Vulnerability summary
CVE-2024-31585 is a medium (CVSS 5.3) Off-by-one Error vulnerability in fedoraproject fedora. EPSS estimates a 0.33% chance of exploitation in the next 30 days, higher than 24.8% of scored vulnerabilities.
CVSS score
5.3/10
010
Medium · v3.1 (CVE.org)EPSS score
0.33%
0%100%
Low · +0.02 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 3 · Related 2Timeline
- 17-04-2024PublishedVulnerability first disclosed.
- 09-06-2025Last modifiedVulnerability information updated.
Description
FFmpeg version n5.1 to n6.1 was discovered to contain an Off-by-one Error vulnerability in libavfilter/avf_showspectrum.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVSS metrics
4 scores · 4 sources · 1 versionMedium 5.3Preferred score · CVE.org (CNA)
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:HSourcesAll 4 agree
- OSV · DebianEcosystem advisory · calculated5.3MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H
- OSV · ChainguardEcosystem advisory · calculated5.3MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H
- NVDNIST5.3MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H
EPSS trend
Probability
0.33%
Chance of exploitation in the next 30 days
Percentile
25%
Versus all other CVEs
30-day change
+0.02 pp
From 0.31% on 19-09-2026
19-09-202619-10-2026
EPSS score0.33%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Chainguard1 product
- ffmpeg-6All versions (No fix recorded)
Debian1 product
- ffmpeg< 7:5.1.5-0+deb12u1 | < 7:7.0.1-3
Fedoraproject1 product
- fedoraEOL38 | 39 | 40
Ffmpeg1 product
- ffmpeg≥ 5.1, < 7.0
4 vendors · 4 products
