Out-of-bounds Read

🗓️ 30 Jan 2024 20:56:55Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 24 Views

Vulnerability in ffmpeg due to improper validation

Reporter	Title	Published	Views	Family All 22
ATTACKERKB	CVE-2023-46407	27 Oct 202320:15	–	attackerkb
AlpineLinux	CVE-2023-46407	27 Oct 202300:00	–	alpinelinux
Chainguard	CVE-2023-46407 vulnerabilities	27 Oct 202320:15	–	cgr
Circl	CVE-2023-46407	28 Oct 202300:17	–	circl
CNNVD	FFmpeg 安全漏洞	27 Oct 202300:00	–	cnnvd
CNVD	FFmpeg Out-of-Bounds Read Vulnerability (CNVD-2024-31519)	31 Oct 202300:00	–	cnvd
CVE	CVE-2023-46407	27 Oct 202300:00	–	cve
Cvelist	CVE-2023-46407	27 Oct 202300:00	–	cvelist
Debian CVE	CVE-2023-46407	27 Oct 202300:00	–	debiancve
NVD	CVE-2023-46407	27 Oct 202320:15	–	nvd

Vulners

Node

ffmpeg ffmpegMatch6.0-r27os

AND

ffmpeg ffmpegMatch6.0.1-r1os

AND

ffmpeg ffmpegMatch6.0.1-r0os

AND

alpinelinux alpine_linuxMatch3.19

OR

ffmpeg ffmpegMatch6.0-r22os

AND

ffmpeg ffmpegMatch4.4-r2os

AND

ffmpeg ffmpegMatch6.0.1-r1os

AND

ffmpeg ffmpegMatch6.0-r21os

AND

ffmpeg ffmpegMatch5.0-r1os

AND

ffmpeg ffmpegMatch5.0.1-r1os

AND

ffmpeg ffmpegMatch4.4-r1os

AND

ffmpeg ffmpegMatch5.0.1-r2os

AND

ffmpeg ffmpegMatch6.0.1-r0os

AND

ffmpeg ffmpegMatch4.3.2-r1os

AND

ffmpeg ffmpegMatch6.0-r1os

AND

ffmpeg ffmpegMatch4.2.2-r2os

AND

ffmpeg ffmpegMatch4.4-r0os

AND

ffmpeg ffmpegMatch5.1.1-r0os

AND

ffmpeg ffmpegMatch5.1-r1os

AND

ffmpeg ffmpegMatch5.0-r0os

AND

ffmpeg ffmpegMatch6.0-r27os

AND

ffmpeg ffmpegMatch6.0-r10os

AND

ffmpeg ffmpegMatch6.0-r16os

AND

ffmpeg ffmpegMatch4.4.1-r0os

AND

ffmpeg ffmpegMatch4.4.1-r3os

AND

ffmpeg ffmpegMatch5.0-r3os

AND

ffmpeg ffmpegMatch5.1.2-r6os

AND

ffmpeg ffmpegMatch6.0-r12os

AND

ffmpeg ffmpegMatch4.4.1-r4os

AND

ffmpeg ffmpegMatch6.0-r26os

AND

ffmpeg ffmpegMatch6.0-r23os

AND

ffmpeg ffmpegMatch6.0-r25os

AND

ffmpeg ffmpegMatch4.4.1-r5os

AND

ffmpeg ffmpegMatch6.0-r6os

AND

ffmpeg ffmpegMatch6.0-r24os

AND

ffmpeg ffmpegMatch5.0.1-r4os

AND

ffmpeg ffmpegMatch4.2.3-r1os

AND

ffmpeg ffmpegMatch4.2.2-r1os

AND

ffmpeg ffmpegMatch4.4.1-r2os

AND

ffmpeg ffmpegMatch4.4-r4os

AND

ffmpeg ffmpegMatch5.1.2-r1os

AND

ffmpeg ffmpegMatch6.0-r4os

AND

ffmpeg ffmpegMatch6.0-r0os

AND

ffmpeg ffmpegMatch5.1.2-r4os

AND

ffmpeg ffmpegMatch5.1.2-r5os

AND

ffmpeg ffmpegMatch5.0.1-r3os

AND

ffmpeg ffmpegMatch4.3.2-r0os

AND

ffmpeg ffmpegMatch6.0-r9os

AND

ffmpeg ffmpegMatch6.0-r3os

AND

ffmpeg ffmpegMatch5.1.2-r2os

AND

ffmpeg ffmpegMatch6.0-r14os

AND

ffmpeg ffmpegMatch6.0-r18os

AND

ffmpeg ffmpegMatch5.1.2-r3os

AND

ffmpeg ffmpegMatch5.1-r3os

AND

ffmpeg ffmpegMatch6.0-r5os

AND

ffmpeg ffmpegMatch5.1.2-r9os

AND

ffmpeg ffmpegMatch4.4-r3os

AND

ffmpeg ffmpegMatch5.1-r0os

AND

alpinelinux alpine_linuxMatchedge

Source	Link
secdb	www.secdb.alpinelinux.org/edge/community.yaml
secdb	www.secdb.alpinelinux.org/v3.19/community.yaml
github	www.github.com/FFmpeg/FFmpeg/commit/bf814387f42e9b0dea9d75c03db4723c88e7d962
patchwork	www.patchwork.ffmpeg.org/project/ffmpeg/patch/20231013014959.536776-1-leo.izen%40gmail.com/
patchwork	www.patchwork.ffmpeg.org/project/ffmpeg/patch/20231015004924.597746-1-leo.izen%40gmail.com/

07 Feb 2024 19:33Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.15.5

EPSS0.00302

out-of-bounds read dist alphabet size memory access sensitive information disclosure denial of service vulnerability ffmpeg security