Lucene search
HistoryOct 27, 2023 - 8:15 p.m.
CVE-2023-46407
ffmpeg
vulnerability
out of bounds read
dist
alphabet size
read_vlc_prefix function
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
20.9%
FFmpeg prior to commit bf814 was discovered to contain an out of bounds read via the dist->alphabet_size variable in the read_vlc_prefix() function.
Affected configurations
Node
ffmpegffmpegRange<6.1
Related
alpinelinux
alpinelinux
CVE-2023-46407
2023-10-27 20:15:09
cgr
cgr
CVE-2023-46407 vulnerabilities
2024-05-19 03:07:16
cve
cve
CVE-2023-46407
2023-10-27 20:15:09
osv
osv
CVE-2023-46407
2023-10-27 20:15:09
wolfi
wolfi
CVE-2023-46407 vulnerabilities
2024-06-26 09:08:30
debiancve
debiancve
CVE-2023-46407
2023-10-27 20:15:09
veracode
veracode
Out-of-bounds Read
2024-01-30 20:56:55
ubuntucve
ubuntucve
CVE-2023-46407
2023-10-27 00:00:00
prion
prion
Out-of-bounds
2023-10-27 20:15:00
cvelist
cvelist
CVE-2023-46407
2023-10-27 00:00:00
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
20.9%
Related for NVD:CVE-2023-46407