CVE-2023-50008

2024-04-1900:00:00

ubuntu.com

buffer overflow

ffmpeg v.n6.1-3-g466799d4f5

local attacker

arbitrary code

av_malloc function

libavutil/mem.c

8.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

JSON

Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local
attacker to execute arbitrary code via the av_malloc function in
libavutil/mem.c:105:9 component.

Bugs

<https://trac.ffmpeg.org/ticket/10701>

OSVersionArchitecturePackageVersionFilename
ubuntu23.10noarchffmpeg< 7:6.0-6ubuntu1.1UNKNOWN
ubuntu24.04noarchffmpeg< 7:6.1.1-3ubuntu5+esm1UNKNOWN
ubuntu14.04noarchlibav< anyUNKNOWN