CVE-2024-7055: ffmpeg Heap-based Buffer Overflow
Vulnerability summary
CVE-2024-7055 is a high (CVSS 8.8) Heap-based Buffer Overflow vulnerability in ffmpeg. EPSS estimates a 1.44% chance of exploitation in the next 30 days, higher than 72.7% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 6 · Related 3Timeline
- 06-08-2024PublishedVulnerability first disclosed.
- 03-11-2025Last modifiedVulnerability information updated.
Description
A vulnerability was found in FFmpeg up to 7.0.1. It has been classified as critical. This affects the function pnm_decode_frame in the library /libavcodec/pnmdec.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 7.0.2 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-273651.
CVSS metrics
11 scores · 5 sources · 4 versions- OSV · UbuntuEcosystem advisory · calculated6.9MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
- OSV · ChainguardEcosystem advisory · calculated6.9MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
- NVDNIST6.9MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- CVE.orgCNA6.3MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:LDiffers
- OSV · UbuntuEcosystem advisory · calculated8.8HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated8.8HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- NVDNIST7.5HighAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS trend
Probability
1.44%
Chance of exploitation in the next 30 days
Percentile
73%
Versus all other CVEs
30-day change
+0.29 pp
From 1.15% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundReportcve
Maturity: poc
Weaknesses
CWE · root cause- CWE-122Heap-based Buffer OverflowA heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
- CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.
Affected systems
Opensuse5 products
- ffmpeg-4&distro=openSUSE Leap 15.6< 4.4-150600.13.13.1
- ffmpeg-4&distro=openSUSE Tumbleweed< 4.4.4-14.1
- ffmpeg-5&distro=openSUSE Tumbleweed< 5.1.4-13.1
- ffmpeg-6&distro=openSUSE Tumbleweed< 6.1.1-9.1
- ffmpeg-7&distro=openSUSE Tumbleweed< 7.1-1.1
Chainguard4 products
- torchaudio-ffmpeg-tarballsAll versions (No fix recorded)
- torchaudio-ffmpeg-tarballs-4.4.4All versions (No fix recorded)
- torchaudio-ffmpeg-tarballs-5.0.3All versions (No fix recorded)
- torchaudio-ffmpeg-tarballs-6.0All versions (No fix recorded)
Suse2 products
- ffmpeg-4&distro=SUSE Linux Enterprise Module for Package Hub 15 SP6< 4.4-150600.13.13.1
- ffmpeg-4&distro=SUSE Linux Enterprise Workstation Extension 15 SP6< 4.4-150600.13.13.1
Ubuntu2 products
- ffmpeg< 7:4.4.2-0ubuntu0.22.04.1+esm9 | < 7:6.1.1-3ubuntu5+esm5
- libavAll versions (No fix recorded)
Debian1 product
- ffmpeg< 7:5.1.6-0+deb12u1 | < 7:7.0.2-1
Ffmpeg1 product
- ffmpeg< 4.3.8 | ≥ 4.4, < 4.4.5 | ≥ 5.0, < 5.1.6 | ≥ 6.0, < 6.1.2 | ≥ 7.0, < 7.0.2
6 vendors · 15 products
References
20 linksShow all 20 references
- lists.opensuse.org/archives/…Advisory
- lists.opensuse.org/archives/…Advisory
- lists.opensuse.org/archives/…Advisory
- lists.opensuse.org/archives/…Advisory
