Alerts This Week
Warning Icon 1 1,149
Alerts This Week
Warning Icon 1 1,149

SUSE: ffmpeg-4 Moderate Integer Overflow Vulnerability 2025:02381-1

suse
Calendar Grey July 18, 2025
Dist Suse Esm H88
SUSE releases a critical security update for ffmpeg-4 targeting buffer overflow flaws. Upgrade immediately!
* bsc#1234018 * bsc#1234019 * bsc#1234020 Cross-References:

Summary

## This update for ffmpeg-4 fixes the following issues: * CVE-2024-36618: Fixed integer overflow iff ULONG_MAX < INT64_MAX (bsc#1234020). New CVE references, fixed in previous release: * CVE-2024-36617: avformat/cafdec: dont seek beyond 64bit (bsc#1234019). * CVE-2024-36616: avformat/westwood_vqa: Fix 2g packets (bsc#1234018). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-2381=1 openSUSE-SLE-15.6-2025-2381=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-2381=1 * SUSE Package Hub 15 15-SP7

Topics%20covered

Topics Covered

security advisory moderate update SuSE integer overflow ffmpeg

References

* bsc#1234018

* bsc#1234019

* bsc#1234020

Cross-

* CVE-2024-36616

* CVE-2024-36617

* CVE-2024-36618

CVSS scores:

* CVE-2024-36616 ( SUSE ): 6.9

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

* CVE-2024-36616 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

* CVE-2024-36616 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

* CVE-2024-36617 ( SUSE ): 6.9

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

* CVE-2024-36617 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

* CVE-2024-36617 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

* CVE-2024-36618 ( SUSE ): 6.9

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2025:02381-1
Release Date: 2025-07-18T14:58:59Z
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate update SuSE integer overflow ffmpeg

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here