medium5.9
CVE-2024-36615
FFmpeg n7.0 has a race condition vulnerability in the VP9 decoder.
Impact
FFmpeg n7.0 has a race condition vulnerability in the VP9 decoder. This could lead to a data race if video encoding parameters were being exported, as the side data would be attached in the decoder thread while being read in the output thread.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ffmpeg | Ffmpeg | Version 7.0 |