CVE-2024-35369 - Integer Overflow in FFmpeg Speex Decoder (avcodec/speexdec.c) Explained
On May 20, 2024, security researchers publicly disclosed CVE-2024-35369, a vulnerability impacting FFmpeg version n6.1.1. This flaw lives in the Speex audio decoder
CVE-2024-36619 - Integer Overflow in FFmpeg's WAVARC Decoder (n6.1.1) Leads to DoS
Recently, security researchers discovered a critical vulnerability in FFmpeg n6.1.1 that affects the WAVARC decoder inside the widely used libavcodec library. Tracked as