Skip to content
OpenAdvisories
High DLA-4241-1 3 CVEs

ffmpeg - security update

Published Jul 14, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 ffmpeg 7:4.3.9-0+deb11u1

Vulnerabilities 3

  • High 7.2
    CVE-2023-6605

    Ffmpeg: dash playlist ssrf vulnerability in ffmpeg

    A flaw was found in FFmpeg's DASH playlist support. This vulnerability allows arbitrary HTTP GET requests to be made on behalf of the machine running FFmpeg via a crafted DASH playlist containing malicious URLs.

    ffmpeg ffmpeg libav ffmpeg Debian Ubuntu Alpine
  • Medium 5.3
    CVE-2023-6602

    Ffmpeg: improper handling of input format in tty demuxer of ffmpeg

    A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows possible data exfiltration via improper parsing of non-TTY-compliant input files in HLS playlists.

    ffmpeg ffmpeg libav ffmpeg Debian Ubuntu Alpine
  • Medium 5.3
    CVE-2023-6604

    Ffmpeg: hls xbin demuxer dos amplification in ffmpeg

    A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or denial of service via the demuxing of arbitrary data as XBIN-formatted data without proper format vali…

    ffmpeg ffmpeg libav ffmpeg Debian Ubuntu Alpine