This vulnerability in FFmpeg 6.1.1 involves an integer overflow in the parse_options function of sbgdec.c within the libavformat module. The issue occurs due to insufficient validation of input options, permitting negative duration values that bypass proper bounds checking. This can cause memory corruption or crashes, impacting the integrity and availability of the affected system. The CVSS v3.1 score is 9.1, indicating a critical severity with network attack vector, low attack complexity, no privileges or user interaction required, and impacts on integrity and availability. No known exploits or patches have been reported as of the published date.

Exploitation of this vulnerability could allow an attacker to cause a denial of service or potentially execute arbitrary code by triggering an integer overflow via crafted input options. The impact affects the integrity and availability of the system running the vulnerable FFmpeg version. There are no reports of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider avoiding processing untrusted input with the affected FFmpeg version or apply any available workarounds recommended by the vendor once published.