Package
ffmpeg-fips-7.1-libavcodec61
Component
ffmpeg-fips-7.1-libavcodec61
Latest update
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Justification
Impact
The vulnerable code is the STOR/FTCH handling in libavcodec/sanm.c, added upstream in commit b48bd23321 and first released in FFmpeg 8.0. The 7.1 release series does not contain it (libavcodec/sanm.c at n7.1.5 has no STOR/FTCH implementation), so the affected code is not included.
Status
Impact
This CVE has been fixed upstream[1][2] but has not yet been backported to version 7.1 and the commit does not cherry-pick cleanly. Upstream maintainers will need to backport the fix to 7.1. [1] https://github.com/FFmpeg/FFmpeg/commit/c41a70b6bb79707e1e3a4b0e31950cd986b9f50e [2] https://github.com/FFmpeg/FFmpeg/commit/d311382c38df9c2237b33a9e8e860a5da7d2895d
Status