Out-of-bounds Write

🗓️ 30 Jan 2024 20:26:22Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 17 Views

ffmpeg Buffer Overflow vulnerability in ref_pic_list_struct function

Reporter	Title	Published	Views	Family All 17
ATTACKERKB	CVE-2023-47470	16 Nov 202303:15	–	attackerkb
AlpineLinux	CVE-2023-47470	16 Nov 202300:00	–	alpinelinux
CNNVD	FFmpeg 安全漏洞	16 Nov 202300:00	–	cnnvd
CNVD	FFmpeg Buffer Overflow Vulnerability (CNVD-2024-31518)	20 Nov 202300:00	–	cnvd
CVE	CVE-2023-47470	16 Nov 202300:00	–	cve
Cvelist	CVE-2023-47470	16 Nov 202300:00	–	cvelist
Debian CVE	CVE-2023-47470	16 Nov 202300:00	–	debiancve
EUVD	EUVD-2023-51581	3 Oct 202520:07	–	euvd
NVD	CVE-2023-47470	16 Nov 202303:15	–	nvd
OSV	CLEANSTART-2026-EZ98723 Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60 allows a remote attacker to achieve an out-of-array write, execute arbitrary code, and cause a ...	30 Jan 202614:21	–	osv

Vulners

Node

ffmpeg ffmpegMatch6.0-r21os

AND

ffmpeg ffmpegMatch4.4.1-r2os

AND

ffmpeg ffmpegMatch4.4-r4os

AND

ffmpeg ffmpegMatch4.4-r1os

AND

ffmpeg ffmpegMatch5.0-r3os

AND

ffmpeg ffmpegMatch6.0-r22os

AND

ffmpeg ffmpegMatch5.0-r0os

AND

ffmpeg ffmpegMatch4.2.2-r1os

AND

ffmpeg ffmpegMatch5.1-r3os

AND

ffmpeg ffmpegMatch6.0-r5os

AND

ffmpeg ffmpegMatch6.0-r3os

AND

ffmpeg ffmpegMatch4.3.2-r1os

AND

ffmpeg ffmpegMatch6.0-r16os

AND

ffmpeg ffmpegMatch6.0-r1os

AND

ffmpeg ffmpegMatch5.1.2-r9os

AND

ffmpeg ffmpegMatch6.0-r6os

AND

ffmpeg ffmpegMatch4.4.1-r0os

AND

ffmpeg ffmpegMatch6.0.1-r0os

AND

ffmpeg ffmpegMatch6.0-r24os

AND

ffmpeg ffmpegMatch6.0-r12os

AND

ffmpeg ffmpegMatch6.0-r10os

AND

ffmpeg ffmpegMatch5.0.1-r1os

AND

ffmpeg ffmpegMatch5.1-r0os

AND

ffmpeg ffmpegMatch6.0-r9os

AND

ffmpeg ffmpegMatch5.1.2-r2os

AND

ffmpeg ffmpegMatch5.1.2-r6os

AND

ffmpeg ffmpegMatch4.4-r0os

AND

ffmpeg ffmpegMatch5.0.1-r3os

AND

ffmpeg ffmpegMatch5.1.1-r0os

AND

ffmpeg ffmpegMatch4.2.2-r2os

AND

ffmpeg ffmpegMatch5.0.1-r2os

AND

ffmpeg ffmpegMatch5.1.2-r4os

AND

ffmpeg ffmpegMatch6.0-r0os

AND

ffmpeg ffmpegMatch5.1.2-r1os

AND

ffmpeg ffmpegMatch4.3.2-r0os

AND

ffmpeg ffmpegMatch6.0-r26os

AND

ffmpeg ffmpegMatch6.0-r18os

AND

ffmpeg ffmpegMatch6.0-r25os

AND

ffmpeg ffmpegMatch4.4-r3os

AND

ffmpeg ffmpegMatch4.2.3-r1os

AND

ffmpeg ffmpegMatch4.4.1-r4os

AND

ffmpeg ffmpegMatch5.0.1-r4os

AND

ffmpeg ffmpegMatch5.1-r1os

AND

ffmpeg ffmpegMatch6.0-r14os

AND

ffmpeg ffmpegMatch5.0-r1os

AND

ffmpeg ffmpegMatch6.0-r4os

AND

ffmpeg ffmpegMatch5.1.2-r3os

AND

ffmpeg ffmpegMatch4.4.1-r5os

AND

ffmpeg ffmpegMatch5.1.2-r5os

AND

ffmpeg ffmpegMatch6.0.1-r1os

AND

ffmpeg ffmpegMatch4.4.1-r3os

AND

ffmpeg ffmpegMatch6.0-r23os

AND

ffmpeg ffmpegMatch4.4-r2os

AND

ffmpeg ffmpegMatch6.0-r27os

AND

alpinelinux alpine_linuxMatchedge

OR

ffmpeg ffmpegMatch6.0-r27os

AND

ffmpeg ffmpegMatch6.0.1-r1os

AND

ffmpeg ffmpegMatch6.0.1-r0os

AND

alpinelinux alpine_linuxMatch3.19

Source	Link
secdb	www.secdb.alpinelinux.org/edge/community.yaml
secdb	www.secdb.alpinelinux.org/v3.19/community.yaml
github	www.github.com/FFmpeg/FFmpeg/commit/4565747056a11356210ed8edcecb920105e40b60
github	www.github.com/goldds96/Report/tree/main/FFmpeg
patchwork	www.patchwork.ffmpeg.org/project/ffmpeg/patch/20230915131147.5945-2-michael%40niedermayer.cc/

07 Feb 2024 12:41Current

7.9High risk

Vulners AI Score7.9

CVSS 3.17.8

EPSS0.00687

out-of-bounds write buffer overflow remote attacker arbitrary code execution denial of service evc_ps.c