Skip to content
OpenAdvisories
High · 8.0 CVE-2023-49528 EUVD-2023-53485GHSA-66qx-hfv2-c44c

Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code and cause a denial of…

Published Apr 12, 2024 · Updated Nov 4, 2025 · Assigned by mitre

Package: ffmpeg Package: ffmpeg Package: libav Ecosystem: Debian Ecosystem: Ubuntu

Description

Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code and cause a denial of service (DoS) via the af_dialoguenhance.c:261:5 in the de_stereo component.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 ffmpeg 7:7.0.1-3 —
Debian 13 ffmpeg 7:7.0.1-3 —
Debian 12 ffmpeg No fix yet —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu Pro 24.04 LTS ffmpeg 7:6.1.1-3ubuntu5+esm1 USN-6803-1
Ubuntu Pro 22.04 LTS ffmpeg 7:4.4.2-0ubuntu0.22.04.1+esm4 USN-6803-1
Ubuntu Pro 20.04 LTS ffmpeg 7:4.2.7-0ubuntu0.1+esm5 USN-6803-1
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 18.04 LTS ffmpeg 7:3.4.11-0ubuntu0.1+esm5 USN-6803-1
Ubuntu Pro 16.04 LTS ffmpeg 7:2.8.17-0ubuntu0.1+esm7 USN-6803-1
Ubuntu Pro 14.04 LTS libav No fix yet —

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed ffmpeg-5 5.1.4-5.1 openSUSE-SU-2024:13888-1
openSUSE Tumbleweed ffmpeg-6 6.1.1-4.1 openSUSE-SU-2024:13895-1

Advisories 4

References