CVE-2023-50007

2024-04-1917:15:51

Google

osv.dev

ffmpeg

buffer overflow

code execution

vulnerability

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.7%

JSON

Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via theav_samples_set_silence function in thelibavutil/samplefmt.c:260:9 component.

CPENameOperatorVersion
ffmpegeqn2.1-de
ffmpegeqn1.1-de
ffmpegeqn5.1-de
ffmpegeqn5.2-de
ffmpegeqn6.2-de
ffmpegeqn2.2-de
ffmpegeqn3.4-de
ffmpegeqn0.11-de
ffmpegeqn2.5-de
ffmpegeqn4.4-de

Name	Operator	Version
ffmpeg	eq	n2.1-de
ffmpeg	eq	n1.1-de
ffmpeg	eq	n5.1-de
ffmpeg	eq	n5.2-de
ffmpeg	eq	n6.2-de
ffmpeg	eq	n2.2-de
ffmpeg	eq	n3.4-de
ffmpeg	eq	n0.11-de
ffmpeg	eq	n2.5-de
ffmpeg	eq	n4.4-de