CVE-2023-49528

2024-04-1200:00:00

ubuntu.com

vulnerability

ffmpeg

buffer overflow

arbitrary code execution

dos

component

stereo

unix

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

AI Score

8.1

Confidence

High

EPSS

Percentile

15.5%

JSON

Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows
a local attacker to execute arbitrary code and cause a denial of service
(DoS) via the af_dialoguenhance.c:261:5 in the de_stereo component.

OSVersionArchitecturePackageVersionFilename
ubuntu23.10noarchffmpeg< 7:6.0-6ubuntu1.1UNKNOWN
ubuntu24.04noarchffmpeg< 7:6.1.1-3ubuntu5+esm1UNKNOWN
ubuntu14.04noarchlibav< anyUNKNOWN