CVEvulnerability

CVE-2023-6604

5.3 MEDIUM Published 2025-01-06 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2025-01-06
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weaknesses
CWE-94, CWE-99

Description

A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or denial of service via the demuxing of arbitrary data as XBIN-formatted data without proper format validation.

Affected configurations

• ffmpeg ffmpeg (>= 2.0 <= 6.0)

Related

Weakness · CWE (2)

  • CWE-94 Improper Control of Generation of Code weakness
  • CWE-99 Improper Control of Resource Identifiers weakness

References