CVE-2023-49502

2024-04-1900:00:00

ubuntu.com

ffmpeg

buffer overflow

vulnerability

arbitrary code execution

local attacker

libavfilter

bwdifdsp.

8.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

JSON

Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local
attacker to execute arbitrary code via the ff_bwdif_filter_intra_c function
in the libavfilter/bwdifdsp.c:125:5 component.

Bugs

<https://trac.ffmpeg.org/ticket/10688>

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchffmpeg< 7:3.4.11-0ubuntu0.1+esm5UNKNOWN
ubuntu20.04noarchffmpeg< 7:4.2.7-0ubuntu0.1+esm5UNKNOWN
ubuntu22.04noarchffmpeg< 7:4.4.2-0ubuntu0.22.04.1+esm4UNKNOWN
ubuntu23.10noarchffmpeg< 7:6.0-6ubuntu1.1UNKNOWN
ubuntu24.04noarchffmpeg< 7:6.1.1-3ubuntu5+esm1UNKNOWN
ubuntu14.04noarchlibav< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	ffmpeg	< 7:3.4.11-0ubuntu0.1+esm5	UNKNOWN
ubuntu	20.04	noarch	ffmpeg	< 7:4.2.7-0ubuntu0.1+esm5	UNKNOWN
ubuntu	22.04	noarch	ffmpeg	< 7:4.4.2-0ubuntu0.22.04.1+esm4	UNKNOWN
ubuntu	23.10	noarch	ffmpeg	< 7:6.0-6ubuntu1.1	UNKNOWN
ubuntu	24.04	noarch	ffmpeg	< 7:6.1.1-3ubuntu5+esm1	UNKNOWN
ubuntu	14.04	noarch	libav	< any	UNKNOWN