CVE-2023-51794

2024-04-2615:15:48

Debian Security Bug Tracker

security-tracker.debian.org

buffer overflow

ffmpeg

arbitrary code

unix

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.9

Confidence

Low

EPSS

Percentile

9.0%

JSON

Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavfilter/af_stereowiden.c:120:69.

OSVersionArchitecturePackageVersionFilename
Debian12allffmpeg< 7:5.1.5-0+deb12u1ffmpeg_7:5.1.5-0+deb12u1_all.deb
Debian11allffmpeg< 7:4.3.7-0+deb11u1ffmpeg_7:4.3.7-0+deb11u1_all.deb
Debian999allffmpeg< 7:7.0.1-3ffmpeg_7:7.0.1-3_all.deb
Debian13allffmpeg< 7:7.0.1-3ffmpeg_7:7.0.1-3_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	ffmpeg	< 7:5.1.5-0+deb12u1	ffmpeg_7:5.1.5-0+deb12u1_all.deb
Debian	11	all	ffmpeg	< 7:4.3.7-0+deb11u1	ffmpeg_7:4.3.7-0+deb11u1_all.deb
Debian	999	all	ffmpeg	< 7:7.0.1-3	ffmpeg_7:7.0.1-3_all.deb
Debian	13	all	ffmpeg	< 7:7.0.1-3	ffmpeg_7:7.0.1-3_all.deb