ffmpeg: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 13

• High 8.8
  CVE-2023-49502

  Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the …

  ffmpeg ffmpeg libav ffmpeg Debian Ubuntu Alpine
  Apr 19, 2024
• High 8.0
  CVE-2023-49501

  Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the …

  ffmpeg ffmpeg libav ffmpeg Debian Ubuntu Alpine
  Apr 19, 2024
• High 8.0
  CVE-2023-50009

  FFmpeg v.n6.1-3-g466799d4f5 allows a heap-based buffer overflow via the ff_gaussian_blur_8 function in libavfilter/edge…

  ffmpeg libav Debian Ubuntu
  Apr 19, 2024
• High 8.0
  CVE-2023-51795

  Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the…

  ffmpeg libav ffmpeg-7 ffmpeg-7.1 Debian Ubuntu Wolfi
  Apr 19, 2024
• High 7.8
  CVE-2023-50008

  FFmpeg v.n6.1-3-g466799d4f5 allows memory consumption when using the colorcorrect filter, in the av_malloc function in …

  ffmpeg ffmpeg libav ffmpeg Debian Ubuntu Alpine
  Apr 19, 2024
• High 7.8
  CVE-2023-50010

  FFmpeg v.n6.1-3-g466799d4f5 allows a buffer over-read at ff_gradfun_blur_line_movdqa_sse2, as demonstrated by a call to…

  ffmpeg ffmpeg libav Debian Ubuntu
  Apr 19, 2024
• High 7.8
  CVE-2023-51791

  Buffer Overflow vulenrability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the…

  ffmpeg libav ffmpeg-7 ffmpeg-7.1 Debian Ubuntu Wolfi
  Apr 19, 2024
• High 7.8
  CVE-2023-51793

  Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the…

  ffmpeg ffmpeg libav ffmpeg-7 Debian Ubuntu Wolfi
  Apr 19, 2024
• High 7.8
  CVE-2023-51798

  Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via a f…

  ffmpeg ffmpeg ffmpeg-7 ffmpeg-7.1 Debian Ubuntu Wolfi
  Apr 19, 2024
• Medium 6.7
  CVE-2023-51797

  Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the…

  ffmpeg libav ffmpeg-7 ffmpeg-7.1 Debian Ubuntu Wolfi
  Apr 19, 2024
• Medium 4.0
  CVE-2023-50007

  FFmpeg v.n6.1-3-g466799d4f5 allows an attacker to trigger use of a parameter of negative size in the av_samples_set_sil…

  ffmpeg ffmpeg libav ffmpeg Debian Ubuntu Alpine
  Apr 19, 2024
• Low 3.6
  CVE-2023-51796

  Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the…

  ffmpeg libav ffmpeg-7 ffmpeg-7.1 Debian Ubuntu Wolfi
  Apr 19, 2024
• Low 3.3
  CVE-2023-51792

  Buffer Overflow vulnerability in libde265 v1.0.12 allows a local attacker to cause a denial of service via the allocati…

  libde265 libde265 Debian Ubuntu
  Apr 19, 2024

Revision history

1. 2026-04-27 #21

   Neue Updates von Debian aufgenommen

2. 2025-08-25 #20

   Neue Updates von Debian aufgenommen

3. 2025-05-04 #19

   Neue Updates von SUSE aufgenommen

4. 2025-04-23 #18

   Neue Updates von openSUSE aufgenommen

5. 2025-04-21 #17

   Neue Updates von openSUSE aufgenommen

6. 2025-03-16 #16

   Neue Updates von SUSE aufgenommen

7. 2024-10-21 #15

   Neue Updates von Debian aufgenommen

8. 2024-09-03 #14

   Neue Updates von SUSE aufgenommen

9. 2024-08-08 #13

   Neue Updates von SUSE aufgenommen

10. 2024-08-06 #12

    Neue Updates von SUSE aufgenommen

11. 2024-06-26 #11

    Neue Updates von Debian aufgenommen

12. 2024-06-16 #10

    Neue Updates von Debian aufgenommen

13. 2024-05-30 #9

    Neue Updates von Ubuntu aufgenommen

14. 2024-05-12 #8

    Neue Updates von Fedora aufgenommen

15. 2024-05-09 #7

    Neue Updates von Fedora aufgenommen

16. 2024-05-07 #6

    Neue Updates von Ubuntu aufgenommen

17. 2024-05-05 #5

    Neue Updates von Fedora aufgenommen

18. 2024-05-01 #4

    Neue Updates von Fedora aufgenommen

19. 2024-04-29 #3

    Neue Updates von SUSE aufgenommen

20. 2024-04-24 #2

    Neue Updates von Fedora aufgenommen

21. 2024-04-21 #1

    Initiale Fassung

References

• Red Hat Bugzilla vom 2024-04-21
  https://bugzilla.redhat.com/show_bug.cgi?id=2276114
• Red Hat Bugzilla vom 2024-04-21
  https://bugzilla.redhat.com/show_bug.cgi?id=2276120
• Red Hat Bugzilla vom 2024-04-21
  https://bugzilla.redhat.com/show_bug.cgi?id=2276128
• Proof of Concept (PoC) für CVE-2023-49501
  https://trac.ffmpeg.org/ticket/10686
• Proof of Concept (PoC) für CVE-2023-49502
  https://trac.ffmpeg.org/ticket/10688
• Proof of Concept (PoC) für CVE-2023-51791
  https://trac.ffmpeg.org/ticket/10738
• Proof of Concept (PoC) für CVE-2023-51795
  https://trac.ffmpeg.org/ticket/10749#no1
• Proof of Concept (PoC) für CVE-2023-51796
  https://trac.ffmpeg.org/ticket/10753
• Proof of Concept (PoC) für CVE-2023-51797
  https://trac.ffmpeg.org/ticket/10756
• Proof of Concept (PoC) für CVE-2023-51798
  https://trac.ffmpeg.org/ticket/10758
• Proof of Concept (PoC) für CVE-2023-50007
  https://trac.ffmpeg.org/ticket/10700
• Proof of Concept (PoC) für CVE-2023-50008
  https://trac.ffmpeg.org/ticket/10701
• Proof of Concept (PoC) für CVE-2023-50009
  https://trac.ffmpeg.org/ticket/10699
• Proof of Concept (PoC) für CVE-2023-50010
  https://trac.ffmpeg.org/ticket/10702
• Proof of Concept (PoC) für CVE-2023-51792
  https://github.com/strukturag/libde265/issues/427
• Fedora Security Advisory FEDORA-EPEL-2024-0C24DA3136 vom 2024-04-25
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-0c24da3136
• SUSE Security Update SUSE-SU-2024:1470-1 vom 2024-04-29
  https://lists.suse.com/pipermail/sle-security-updates/2024-April/018440.html
• SUSE Security Update SUSE-SU-2024:1468-1 vom 2024-04-29
  https://lists.suse.com/pipermail/sle-security-updates/2024-April/018441.html
• Fedora Security Advisory FEDORA-EPEL-2024-808F3961EF vom 2024-05-02
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-808f3961ef
• Fedora Security Advisory FEDORA-EPEL-2024-4EDAF658B7 vom 2024-05-05
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-4edaf658b7
• Ubuntu Security Notice USN-6764-1 vom 2024-05-07
  https://ubuntu.com/security/notices/USN-6764-1
• Fedora Security Advisory FEDORA-EPEL-2024-F74FBCE604 vom 2024-05-09
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-f74fbce604
• Fedora Security Advisory FEDORA-2024-92780A83F9 vom 2024-05-09
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-92780a83f9
• Fedora Security Advisory FEDORA-2024-F93392509C vom 2024-05-09
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-f93392509c
• Fedora Security Advisory FEDORA-2024-55E7E839F1 vom 2024-05-09
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-55e7e839f1
• Fedora Security Advisory FEDORA-EPEL-2024-AC000E6379 vom 2024-05-09
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-ac000e6379
• SUSE Security Update SUSE-SU-2024:1593-1 vom 2024-05-10
  https://lists.suse.com/pipermail/sle-security-updates/2024-May/018498.html
• SUSE Security Update SUSE-SU-2024:1592-1 vom 2024-05-10
  https://lists.suse.com/pipermail/sle-security-updates/2024-May/018499.html
• Fedora Security Advisory FEDORA-2024-DF7E365B4A vom 2024-05-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-df7e365b4a
• Fedora Security Advisory FEDORA-EPEL-2024-E94A7220F2 vom 2024-05-11
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-e94a7220f2
• Ubuntu Security Notice USN-6803-1 vom 2024-05-30
  https://ubuntu.com/security/notices/USN-6803-1
• Debian Security Advisory DSA-5712 vom 2024-06-15
  https://lists.debian.org/debian-security-announce/2024/msg00122.html
• Debian Security Advisory DSA-5721 vom 2024-06-26
  https://lists.debian.org/debian-security-announce/2024/msg00132.html
• SUSE Security Update SUSE-SU-2024:2803-1 vom 2024-08-07
  https://lists.suse.com/pipermail/sle-security-updates/2024-August/019132.html
• SUSE Security Update SUSE-SU-2024:2864-1 vom 2024-08-09
  https://lists.suse.com/pipermail/sle-security-updates/2024-August/019157.html
• SUSE Security Update SUSE-SU-2024:3114-1 vom 2024-09-03
  https://lists.suse.com/pipermail/sle-security-updates/2024-September/019351.html
• Debian Security Advisory DLA-3928 vom 2024-10-21
  https://lists.debian.org/debian-lts-announce/2024/10/msg00019.html
• SUSE Security Update SUSE-SU-2025:0862-1 vom 2025-03-14
  https://lists.suse.com/pipermail/sle-security-updates/2025-March/020516.html
• openSUSE Security Update OPENSUSE-SU-2025:15010-1 vom 2025-04-19
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/VRV2HFFHZK4M5WT2N2QVH4SDEORPP6SK/
• openSUSE Security Update OPENSUSE-SU-2025:15012-1 vom 2025-04-23
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/PBWTPGXISA6QWLKHLVSAH3P2Q3ZIYOT6/
• SUSE Security Update SUSE-SU-2025:1450-1 vom 2025-05-05
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/E5C3GC7VTUMYO4WCWZXPMHKMIVO4WJ3W/
• Debian Security Advisory DSA-5985 vom 2025-08-25
  https://lists.debian.org/debian-security-announce/2025/msg00149.html
• Debian Security Advisory DLA-4550 vom 2026-04-27
  https://lists.debian.org/debian-lts-announce/2026/04/msg00032.html