CVE-2023-6604
Last modified
CVE-2023-6604 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or denial of service via the demuxing of arbitrary data as XBIN-formatted data without proper format validation.. EPSS estimates a 0.43% chance of exploitation in the next 30 days.
Description
A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or denial of service via the demuxing of arbitrary data as XBIN-formatted data without proper format validation.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ffmpeg | Ffmpeg | >= 2.0, <= 6.0 |
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2334337Exploit, Issue Tracking, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-6604?
How severe is CVE-2023-6604?
How do I fix CVE-2023-6604?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-6598The SpeedyCache plugin for WordPress is vulnerable to unauth…4.3
- CVE-2023-6599Missing Standardized Error Handling Mechanism in GitHub repo…4.3
- CVE-2023-6600The OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. …5.4
- CVE-2023-6601A flaw was found in FFmpeg's HLS demuxer. This vulnerability…4.7
- CVE-2023-6602A flaw was found in FFmpeg's TTY Demuxer. This vulnerability…5.3
- CVE-2023-6603A flaw was found in FFmpeg's HLS playlist parsing. This vuln…7.5
- CVE-2023-6605A flaw was found in FFmpeg's DASH playlist support. This vul…7.2
- CVE-2023-6606An out-of-bounds read vulnerability was found in smbCalcSize…7.1
- CVE-2023-6607A vulnerability has been found in Tongda OA 2017 up to 11.10…7.5
- CVE-2023-6608A vulnerability was found in Tongda OA 2017 up to 11.9 and c…7.5
- CVE-2023-6609A vulnerability was found in osCommerce 4. It has been class…6.1
- CVE-2023-6610An out-of-bounds read vulnerability was found in smb2_dump_d…7.1
Are you affected by CVE-2023-6604?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST